fix: audit remediation — P0 correctness/security fixes + P1 product hardening - #71

Merged

CodeWithJuber merged 13 commits into

claude/loop-goal-worktree-bugs-gqrxp8

Jul 17, 2026

Commits on Jul 17, 2026

fix(onboarding): safe settings write, hook-path parity, state/source separation
claude
committed
d23ce5e
docs+wording: honest claims, terminology renames, drop scanner certification language
claude
committed
a6c3d9f
fix(core): inventory-aware atlas freshness, evidence-aware verify verdicts, resolvable ledger refs
claude
committed
5e33219
fix(security): close shell secret-read bypass, jq-free redaction, tighter perms
claude
committed
1f72d74
fix(sync): validate managed-file body, not just the embedded marker
claude
committed
77d715b
merge: workstream D — inventory-aware atlas, evidence-aware verify, resolvable ledger refs
claude
committed
937ffad
merge: workstream G — honest claims, terminology renames, no scanner certification
claude
committed
6185d15
style(biome): normalize formatting under root config
claude
committed
53de265
feat(mcp): context7 opt-in via forge integrations; update-aware emitters; wire honest labels
claude
committed
cdd1fd5
feat(pricing+release): effective-date model pricing; require full quality gate before publish
claude
committed
5031e11
feat(product): policy profiles, repo config, obligation matrix, subsystem health, labs grouping
claude
committed
ce255ff
Merge remote-tracking branch 'origin/master' into claude/loop-goal-worktree-bugs-gqrxp8
claude
committed
c4ac1b7
chore(gitleaks): allowlist the placeholder token in the redactor test
claude
committed
92b7d8d