Control plane
Project status
Repository, release, and evidence state from the deterministic machine-readable control snapshot.
Repository truth
Git and CI state
Exact immutable identifiers and the current security-analysis state.
6f4d8326e8b99dd56f04df23079657d30798ae846f4d8326e8b99dd56f04df23079657d30798ae846f4d8326e8b99dd56f04df23079657d30798ae84Release contract
Release target
What this candidate supports—and what it explicitly does not claim.
Supported deployment boundary
- supervised, explicitly authorized isolated-lab assessment
- Python 3.12+ POSIX macOS/Linux controller
- V1 CLI with Docker sandbox by default
- localhost-only FastAPI console with server-owned live mode
- Phase 2A transactional audit diagnostics and local consistency anchor
Unsupported deployment modes
- unattended, scheduled, or 24/7 operation
- V2 continuous mode as a supported product
- production or regulated deployment
- network-exposed or multi-user service
- local JSON anchor represented as WORM
- Windows-hosted audit writing
Delivered evidence
Completed milestones
Milestones are tied to repository evidence, not roadmap checkboxes.
Phase 1 safety freeze
Phase 2A transactional audit hardening
CodeQL enablement and alert closure
Copilot repository safety context
Release-closeout recovery and V2 isolation
Evidence gates
Phase roadmap
NOW closes before NEXT begins. LATER and DEFERRED do not imply current capability.
NOW
- COMPLETE — supervised V1 release closeout merged as b75af239c441204699114ce34970e37b394b3c21
NEXT
- Complete one bounded operational V2 foundation
- Move HMAC signing out of the orchestrator
LATER
- Add an independently administered external anchor
- Add browser-executed DOM security coverage
DEFERRED
- Unattended continuous service
- Production, regulated, network-exposed, or multi-user deployment
Decision pressure
Blocker matrix
Release gates and deferred constraints are separated so future scope cannot masquerade as a current blocker.
| Item | State | Impact | Owner |
|---|---|---|---|
| Release verification | closed | none; all local, PR, review, merge, post-merge CI, and CodeQL gates passed | completed by sole implementation session |
| Out-of-band signer | deferred issue #4 | blocks higher-trust deployment, not supervised isolated-lab RC | future separately authorized increment |
| Operational V2 lifecycle | deferred by Path A | continuous mode remains experimental and unsupported | future separately authorized increment |
Operator queue
Next exact action
One executable action owns the NOW gate.
System boundary
Architecture
Supported V1 architecture from operator input through transactional audit.
- 01Operator CLI or localhost-only console
- 02Fail-closed guardrail: scope, tool firewall, arguments, budget, time, audit, output
- 03Docker sandbox by default; approved local exception only
- 04Read-only network, host, AD, and web collectors
- 05Optional AI analysis; never an authorization source
- 06Deterministic V1 chaining and CSV/Markdown/JSON reports
- 07Transactional Phase 2A audit log plus local non-WORM consistency anchor
Truthful execution
V1 execution flow
V1 is operator-invoked and bounded. V2 remains incomplete and opt-in experimental.
V1 execution flow
- 01operator supplies explicit targets and profile
- 02target scope is normalized and checked
- 03high-risk mode requires exact approval
- 04guardrail authorizes the tool and arguments
- 05sandbox executes a bounded collector
- 06output is sanitized and normalized
- 07planner may propose the next bounded profile
- 08findings and proof-tagged paths are reported
- 09every decision and execution boundary is audited
V2 experimental flow
- 01specialized agent proposals
- 02incomplete target and collector integration
- 03experimental EvidenceGraph
- 04non-release-grade global correlation
- 05non-transactional graph persistence
- 06gated ContinuousRunner
- 07no supported CLI or unattended loop
Verification
Test and security evidence
Local and GitHub gates are visible without converting pending work into a claim.
- 292-test hash-locked Python 3.12 release-closeout regression passed
- 51 focused release, V2, web, and audit tests passed
- 123 audit persistence, filesystem, anchor, CLI, and concurrency tests passed
- Ruff comparison found no new or changed findings; every changed Python file passed
- Bandit found no medium- or high-severity issue
- Dependency audit found no known vulnerability
- Clean sdist, wheel build, locked wheel install, and CLI smoke passed
- Phase 1 redirect, request-body, peer, live-mode, and DOM boundaries preserved
- Phase 2A strict replay, locking, durability, diagnostics, and recovery preserved
- PR CI and CodeQL passed on reviewed head 8f1fed7d88c821f926c332ea691f151c58d73dbd
- post-merge main CI 30523751828 and CodeQL 30523751784 passed
- post-merge open CodeQL alerts: 0
- exactly one independent read-only review completed; all three findings were resolved before merge
Canonical sources
Decisions
Release rationale, roadmap gates, operations, rollback, and recovery evidence live in the versioned control pack.
Safe use
Operations and rollback
Use the runbook for release verification, audit recovery, Phase 1/V2 incompatibility, and rollback. No deployment was performed.