fix: RFC 3161 signature verification, telemetry privacy, scan-path safety - #30

Merged

kuzivaai merged 9 commits into

mainfrom

fix/timestamp-verification-and-telemetry-privacy

Jul 21, 2026

Commits on Jul 21, 2026

fix: RFC 3161 signature verification, telemetry privacy, scan-path safety

Kuziva Muzondo
and
claude
committed
a23d4af
fix(ci): PR comment must not fail the compliance gate

Kuziva Muzondo
and
claude
committed
51655ba
fix(security): close TOCTOU + 8 further defects found by review

Kuziva Muzondo
and
claude
committed
f16bb43
fix(security): close ancestor race in main scanners; guard by construction

Kuziva Muzondo
and
claude
committed
58db545
fix(security): close ancestor race in cross_file_flow by reading in-walk

Kuziva Muzondo
and
claude
committed
5ddacc6
fix(security): close FIFO hang and out-of-root read in handoff; sweep the class

Kuziva Muzondo
and
claude
committed
18440aa
fix(security): close ancestor race in ai_code_governance and guardrail_scanner

Kuziva Muzondo
and
claude
committed
cb2a26f
docs(changelog): record the handoff defects, the ancestor-race migrations

Kuziva Muzondo
and
claude
committed
34ed7a7
docs(governance): source the sole-maintainer claim so the claim auditor passes

Kuziva Muzondo
and
claude
committed
f920d46