Repository navigation

Harden the verifier's input and state boundaries - #9

Merged

Deep-Sixed merged 4 commits into

mainfrom

claude/relaxed-brown-dzjej0

Sep 25, 2026

Merged

Harden the verifier's input and state boundaries#9
Deep-Sixed merged 4 commits into
mainfrom
claude/relaxed-brown-dzjej0

Commits on Sep 25, 2026
- Refuse JSON that is not an object at the loader
  claude
  committed
  14c00a6
- Exclude the evidence directory by prefix, not by what it held
  claude
  committed
  f8863bb
- Never follow a symlink inside a directory entry when hashing state
  claude
  committed
  a1a45c7
- Say where compose looked for the governing baseline
  claude
  committed
  2a1e36f