meta (shipped in #124) — tracking issue for the v3.7.6 hardening batch that addressed findings from a full adversarial code review: note data-integrity (frontmatter/lead + fence-aware parse, symmetric mesh merge convergence), one-bad-byte read hardening, guard false-positive fixes (freshness -C/compound forms, command-anchored forge rules, bare > side-effect, project-vs-global .claude/, negation-aware auth), guard crash-hardening, enforcement fail-open holes (adapter fail-closed, contentless-consult gate-dodge, secret-output 2>/dev/null leak), atomic config/hook/backup writes, checkpoint/mesh/update/lint availability fixes, and the migrate-hook data-loss. 714 tests + ruff + mypy green. Deferred items tracked in #125-#131.
Proudly Made in Nebraska. Go Big Red! 🌽 https://xkcd.com/2347/
meta (shipped in #124) — tracking issue for the v3.7.6 hardening batch that addressed findings from a full adversarial code review: note data-integrity (frontmatter/lead + fence-aware parse, symmetric mesh merge convergence), one-bad-byte read hardening, guard false-positive fixes (freshness
-C/compound forms, command-anchored forge rules, bare>side-effect, project-vs-global.claude/, negation-aware auth), guard crash-hardening, enforcement fail-open holes (adapter fail-closed, contentless-consult gate-dodge, secret-output2>/dev/nullleak), atomic config/hook/backup writes, checkpoint/mesh/update/lint availability fixes, and the migrate-hook data-loss. 714 tests + ruff + mypy green. Deferred items tracked in #125-#131.Proudly Made in Nebraska. Go Big Red! 🌽 https://xkcd.com/2347/