Cadence

Merge pull request #569 from ravidsrk/feat/escape-probe

ravidsrk/orca-fleet · 2126d7c · 15:51

Probe a shell redirect through the Bash registration (PR #569)

ravidsrk/orca-fleet · 7df5403 · 15:40

Verify-settings: per-tool coverage, inline boundaries (PR #569)

ravidsrk/orca-fleet · 3e3542a · 15:27

Match-all matchers arm the guard; threat model names tee precisely

ravidsrk/orca-fleet · 0786fe2 · 15:10

Regenerate badges after rebase onto merged egress and injection work

ravidsrk/orca-fleet · 93a18bc · 15:02

Merge pull request #568 from ravidsrk/feat/injection-drills

ravidsrk/orca-fleet · d971c6a · 14:59

Regenerate badges after rebase onto merged egress enforcement

ravidsrk/orca-fleet · 831f79c · 14:48

Merge pull request #567 from ravidsrk/feat/egress-enforcement

ravidsrk/orca-fleet · b3bfedf · 14:47

Preserve empty quoted words in the env -S split (PR #567)

ravidsrk/orca-fleet · fb54395 · 14:36

Parse GNU env -S escapes when splitting (PR #567)

ravidsrk/orca-fleet · 519fe88 · 14:23

env -S: the split string takes the head (PR #567)

ravidsrk/orca-fleet · 1ed0349 · 14:11

Receipts: env -S operand is the command; negation never arms

ravidsrk/orca-fleet · 8f02a5d · 14:01

Receipt options are allowlisted; wrapper options peel (PR #567)

ravidsrk/orca-fleet · 4a0f71e · 13:51

Recognize versioned/optioned python receipts (PR #567)

ravidsrk/orca-fleet · 78bdeda · 13:27

Rule 5: receipts must run, attached fields, group openers (PR #567)

ravidsrk/orca-fleet · 88e1ff4 · 13:19

Rule 5: peel wrappers, keep && across comments; verify both anchors

ravidsrk/orca-fleet · bd5d412 · 13:08

Merge pull request #566 from ravidsrk/feat/rugpull-pin-review

ravidsrk/orca-fleet · 8e15779 · 13:00

Fence the baseline verdict to the initial inventories (PR #566)

ravidsrk/orca-fleet · 96beb83 · 12:55

Test pin_review and quarantine_check through the library door (D9)

ravidsrk/orca-fleet · 9565b8a · 08:52

Regenerate badges after rebase onto merged quarantine switch

ravidsrk/orca-fleet · 2036b70 · 08:40

Merge pull request #565 from ravidsrk/feat/quarantine-switch

ravidsrk/orca-fleet · 878e224 · 08:35

Verify the deny-hook registration by parsing and probing it (PR #569)

ravidsrk/orca-fleet · 710efff · 08:29

Escape probe pins the measured boundary; spawn verifies deny-hook arming

ravidsrk/orca-fleet · b181b5a · 08:05

Review fixes: benign false alarms fail; payload preservation is exact

ravidsrk/orca-fleet · ca6fdc8 · 07:58

Review fixes: operator-aware receipt judgement, --expect-ancestor anchoring, empty-head round-trip, explicit method wins

ravidsrk/orca-fleet · 3b0424a · 07:55

Injection corpus for the fence + obedience drill defined (live leg owed)

ravidsrk/orca-fleet · 781b388 · 07:39

Trim merge-serialization addition back under reshape-it's activation cap

ravidsrk/orca-fleet · e3af328 · 07:30

Egress enforcement: deny-hook receipt rule, head anchoring at close

ravidsrk/orca-fleet · ee05892 · 07:29

Review fix: copied-bundle root layout resolves instead of refusing

ravidsrk/orca-fleet · e5a8d53 · 07:15

Review fixes: slash-commands are instructions, NUL-safe diffs, no-renames, bump listings never roll up, completion is checked

ravidsrk/orca-fleet · 5c994c3 · 07:15

Threat model: quarantine rung is the shipped switch, not a manual rollback

ravidsrk/orca-fleet · c7bf0ff · 07:03

Preflight quarantine fixture carries its mission (missing SKILL now refuses)

ravidsrk/orca-fleet · 41c1d05 · 07:01

Review fix: bundle layout playbooks checked; missing mission cannot evaluate

ravidsrk/orca-fleet · 9b21403 · 07:00

Rug-pull review for pack pin bumps: classifier, baselines, enforced artifact

ravidsrk/orca-fleet · 19d4135 · 06:58

Merge branch 'main' into feat/quarantine-switch

ravidsrk/orca-fleet · 663b825 · 06:47

Merge pull request #564 from ravidsrk/docs/agent-baseline-assessment

ravidsrk/orca-fleet · 3b5da4c · 06:47

Shard weight for test_quarantine

ravidsrk/orca-fleet · ff4ee89 · 06:45

Docs: deny-list resolves from the fleet catalog, never the target repo

ravidsrk/orca-fleet · 34b74bc · 06:40

Review fixes: catalog-anchored deny-list, fail-closed pins/UTF-8/directory, human-name shape, --mission at every mission start

ravidsrk/orca-fleet · 2934b99 · 06:39

Review fixes: AUT-05 downgraded (unpinned grant key), trust boundary scoped, guide lists threat-model

ravidsrk/orca-fleet · 2fb5641 · 06:32

Ride threat-model from attest-it (orphan-policy contract)

ravidsrk/orca-fleet · c914fc7 · 06:22

Component quarantine switch: deny-list enforced at validate and preflight

ravidsrk/orca-fleet · b56dccd · 06:20

Adopt Agent Baseline as yardstick: frozen-catalog assessment + threat model

ravidsrk/orca-fleet · 8387657 · 06:10

Merge pull request #554 from ravidsrk/docs/lean-witness-gate3

ravidsrk/orca-fleet · a377352 · 05:41

Bind witness to the tag: fingerprint against bundle rebuilt at 5331b9b

ravidsrk/orca-fleet · 798dc71 · 05:34

Merge branch 'main' into docs/lean-witness-gate3

ravidsrk/orca-fleet · 72930ad · 05:07

Merge pull request #556 from ravidsrk/fix/rehearsal-tag-window

ravidsrk/orca-fleet · 7b155c7 · 02:36