feat: develop the 3 deferred hardening items (Rule-of-Two on main paths, suspend auto-reattach+GC, opt-in hard egress) - #102

Merged

RNT56 merged 4 commits into

claude/nilcore-codebase-audit-ec39d8from

feat/deferred-hardening

Jul 10, 2026

Commits on Jul 10, 2026

feat(capguard): enforce Rule-of-Two trifecta on the main paths (chat/serve/swarm)

RNT56
and
claude
committed
feat(suspend): auto-reattach a woken drive to its preserved work + GC suspend/ refs

RNT56
and
claude
committed
feat(sandbox): opt-in HARD container egress boundary via an --internal network + gateway

RNT56
and
claude
committed
chore: satisfy golangci-lint (ineffassign + ST1005)

RNT56
and
claude
committed