John Smith 710b2aeb3b feat(path-arg-grants-91): T1 scoped build/test path-arg grants with live-proof-first enforcement ...

M0 (REQ-A0) ran first through installed pps 41.0.0: the native-map
commandEffects shape enforces (pytest tests/rag allows, traversal denies)
while the descriptor-list form is unparsed and fails the whole permission
layer closed to ask. Implementation follows the winner (no HALT).

Renderer emits native-map declarations for pytest/go/cmake/gcc(+g++)
scoped to held verbs, audit descriptors in a sidecar, gcc overlay allows
after the 42 terminal denies (byte-identical), go path_read */...
exception, engine cmake -S * grant + build/* write scope to the two
engine roles only. Corpus + redproof + charter-verbatim gate probes;
full regen (generated leaves in this commit carry dev-regen DIRTY
provenance — refreshed by the clean regen follow-up).

Refs #91

2026-10-25 01:22:51 -04:00

..

heretek-omni-fleet.json

feat(path-arg-grants-91): T1 scoped build/test path-arg grants with live-proof-first enforcement

2026-10-25 01:22:51 -04:00