Arch-analysis 2026-06-06 remediation: P1/P2 governance & transport hardening#4

Merged

tachyon-beep merged 17 commits into

mainfrom

fix/arch-analysis-2026-06-06-p1-p2

Jun 5, 2026

Commits on Jun 5, 2026

docs(analysis): architecture analysis of Legis 1.0.0rc2

tachyon-beep
and
claude
committed
Merge branch 'docs/arch-analysis-2026-06-06'
tachyon-beep
committed
fix(governance): harden read paths against malformed entity_key (Q-L1/Q-L2)

tachyon-beep
and
claude
committed
fix(store): verify_integrity returns False on non-finite-float tamper (Q-M3)

tachyon-beep
and
claude
committed
refactor(governance): type core modules against AppendOnlyStore protocol (Q-L3)

tachyon-beep
and
claude
committed
fix(policy): honesty-gate requires boundary result as the assertion subject (Q-M8)

tachyon-beep
and
claude
committed
fix(wardline): make same-cell batch routing atomic (Q-M5 / audit M3)

tachyon-beep
and
claude
committed
fix(policy): fail closed when policy-cell config is absent (Q-M7 / audit H6)

tachyon-beep
and
claude
committed
refactor(service): make service/ the single path to governance decisions (Q-H2)

tachyon-beep
and
claude
committed
fix(api): single-secret mode is writer-scoped, opt-in operator (Q-H1)

tachyon-beep
and
claude
committed
docs(governance): clarify Q-M1 source-binding contract + prove signed status

tachyon-beep
and
claude
committed
docs(governance): decide + document Filigree binding-availability contract (Q-M6)

tachyon-beep
and
claude
committed
fix(checks/pulls): label recorded check/PR facts unauthenticated (Q-M2/Q-M4)

tachyon-beep
and
claude
committed
feat(filigree): Weft-component HMAC on the Filigree transport (Q-M4)

tachyon-beep
and
claude
committed
fix(protected): LLM judge is advisory only on protected policies (Q-H3)

tachyon-beep
and
claude
committed
fix(filigree): send canonical signed bytes on the wire (Q-M4 transport)

tachyon-beep
and
claude
committed
chore(release): prepare 1.0.0rc3 (declare pydantic, bump version)

tachyon-beep
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Arch-analysis 2026-06-06 remediation: P1/P2 governance & transport hardening#4

Arch-analysis 2026-06-06 remediation: P1/P2 governance & transport hardening#4
tachyon-beep merged 17 commits into
mainfrom
fix/arch-analysis-2026-06-06-p1-p2

Commits on Jun 5, 2026

docs(analysis): architecture analysis of Legis 1.0.0rc2

Merge branch 'docs/arch-analysis-2026-06-06'

fix(governance): harden read paths against malformed entity_key (Q-L1/Q-L2)

fix(store): verify_integrity returns False on non-finite-float tamper (Q-M3)

refactor(governance): type core modules against AppendOnlyStore protocol (Q-L3)

fix(policy): honesty-gate requires boundary result as the assertion subject (Q-M8)

fix(wardline): make same-cell batch routing atomic (Q-M5 / audit M3)

fix(policy): fail closed when policy-cell config is absent (Q-M7 / audit H6)

refactor(service): make service/ the single path to governance decisions (Q-H2)

fix(api): single-secret mode is writer-scoped, opt-in operator (Q-H1)

docs(governance): clarify Q-M1 source-binding contract + prove signed status

docs(governance): decide + document Filigree binding-availability contract (Q-M6)

fix(checks/pulls): label recorded check/PR facts unauthenticated (Q-M2/Q-M4)

feat(filigree): Weft-component HMAC on the Filigree transport (Q-M4)

fix(protected): LLM judge is advisory only on protected policies (Q-H3)

fix(filigree): send canonical signed bytes on the wire (Q-M4 transport)

chore(release): prepare 1.0.0rc3 (declare pydantic, bump version)