Repository navigation

Remediation: fail-closed --expect, case-safe witness, accurate policy budget, working example bundle - #105

Merged

noctem-o merged 6 commits into

mainfrom

remediation/audit-fixes

Jun 9, 2026

Merged

Remediation: fail-closed --expect, case-safe witness, accurate policy budget, working example bundle#105
noctem-o merged 6 commits into
mainfrom
remediation/audit-fixes

Commits on Jun 9, 2026
- fix(verify): fail closed when --expect is passed without --recompute-witness-root
  
  noctem-o
  and
  claude
  committed
  9212f2e
- fix(witness): normalize tool-name case in the witness view and validation
  
  noctem-o
  and
  claude
  committed
  fec157b
- fix(policy): make history_max_calls allow exactly N calls
  
  noctem-o
  and
  claude
  committed
  d9279da
- fix(repro): call the real run subcommand with supported flags
  
  noctem-o
  and
  claude
  committed
  beab75e
- fix(bundle): regenerate the replay/run_0000 example so it verifies
  
  noctem-o
  and
  claude
  committed
  152e618
- docs(site): repair landing-page rendering and soften overclaims
  
  noctem-o
  and
  claude
  committed
  4731a28