fix: close generation-10 audit findings

[Wibias]

Summary

Remediates the full generation-10 adversarial audit set on current main.

Hard requirement: authorityMode=off must never invoke Windows Hello or require an Authority-host acceptance. Off remains an explicit opt-out of OS-backed approval; high-assurance and all retain scoped trusted authority.

Findings covered:

• GD-AUDIT-003 — caller-attested lifecycle intent in Off mode
• GD-AUDIT-018 — required probe clean evidence can omit trigger files
• GD-AUDIT-006 — classic branch-pattern parity
• GD-AUDIT-022 — issue/repository text prompt injection can grant merge routing
• GD-AUDIT-023 — named GraphQL mutation boundary bypass
• GD-AUDIT-015 — unresolved review-thread merge TOCTOU
• GD-AUDIT-021 — behavioral-eval transcripts lack trusted execution provenance

Development state

TDD remediation in progress. The current head intentionally contains the focused generation-10 regression suite before production fixes; initial CI is expected to be RED and will be used as defect reproduction evidence.

Design: docs/superpowers/specs/2026-08-24-audit-generation-10-remediation-design.md

Plan: docs/superpowers/plans/2026-08-24-audit-generation-10-remediation.md

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: f75f0bf2-e938-448b-9b94-16e09890546c

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}