fix CI y LEGAL.md

risk_history.ts: loadBaseline ahora ordena por timestamp descendente antes de buscar branch main/master. Fix test que esperaba agencyScore 20 y obtenia 60 por orden de archivos. LEGAL.md: removidas referencias a Sentinel Oracle Core / Oracle session. Usa AI chat mode y sentinel auth remove.

Author: javier20dev25

LEGAL.md

@@ -19,7 +19,7 @@ Sentinel CLI runs entirely on your local machine. We do not operate servers, col
 
 ### 2. Third-Party Data Processing
 
-When you use Sentinel Oracle Core with a third-party AI provider, your prompts and file contents are sent to that provider's API:
+When you use Sentinel CLI's AI chat mode with a third-party AI provider, your prompts and file contents are sent to that provider's API:
 
 - **Google Gemini**: Prompts and tool outputs are processed by Google. See [Google Privacy Policy](https://policies.google.com/privacy).
 - **Anthropic Claude**: Prompts and tool outputs are processed by Anthropic. See [Anthropic Privacy Policy](https://www.anthropic.com/privacy).
@@ -54,10 +54,10 @@ rm -rf ~/.sentinel
 To delete only API keys:
 
 ```bash
-sentinel oracle auth remove <provider>
+sentinel auth remove <provider>
 ```
 
-or run `/auth remove` inside an Oracle session.
+or run `/auth remove` inside an AI chat session.
 
 ---
 
@@ -149,7 +149,7 @@ Sentinel CLI is a local tool and does not provide cloud services. Compliance wit
 ### Ownership
 
 - **Sentinel CLI code**: Copyright © 2025-2026 Sentinel Security. All rights reserved under the BUSSL-1.1 license.
-- **Sentinel and SecuriGit**: "Sentinel", "Sentinel Oracle Core", and "SecuriGit" are trademarks of Sentinel Security.
+- **Sentinel and SecuriGit**: "Sentinel" and "SecuriGit" are trademarks of Sentinel Security.
 - **Your code**: Sentinel CLI does not claim ownership of any code you scan, analyze, or process with the tool. Your code remains your intellectual property.
 - **AI provider output**: Content generated by AI providers is subject to the terms of those providers.
 

src/core/risk_history.ts

@@ -107,7 +107,7 @@ export function loadHistory(repoPath: string): RiskSnapshot[] {
 }
 
 export function loadBaseline(repoPath: string): RiskSnapshot | null {
-  const history = loadHistory(repoPath);
+  const history = loadHistory(repoPath).sort((a, b) => b.timestamp.localeCompare(a.timestamp));
   return history.find(s => s.branch === 'main' || s.branch === 'master') || null;
 }