Wave 1: eval-explain, shadow-mode, cli-distribution, editor-schemas, diff-fuzz-bench - #4

Merged

bb-connor merged 85 commits into

mainfrom

worktree-wave-1

Jul 15, 2026

Commits on Jul 12, 2026

fix: regenerate SDK contracts for phase-gated guard rules

bb-connor
and
claude
committed
422d19f
feat(cli): add h2h eval subcommand with decision exit codes
bb-connor
committed
1d978d1
feat(cli): add content and args-size action flags to h2h eval

bb-connor
and
claude
committed
21c81e9
feat(cli): add origin and posture context flags to h2h eval
bb-connor
committed
9f582ea
feat(cli): add --action-json/--action-file escape hatch to h2h eval
bb-connor
committed
a51808d
feat(cli): add --explain trace rendering and h2h explain subcommand
bb-connor
committed
c559d69
fix(cli): correct explain precedence notes and trim trace whitespace
bb-connor
committed
b69d5d3
feat(cli): add json and receipt output formats to h2h eval
bb-connor
committed
b48f7b9
docs(cli): document h2h eval and h2h explain
bb-connor
committed
88175ee
docs(cli): use builtin:ai-agent in shell-command eval example
bb-connor
committed
0a3802c

Commits on Jul 13, 2026

fix(cli): fail closed if eval output serialization ever fails
bb-connor
committed
325e1d9
feat(receipt): add optional enforcement summary to receipt schema and Rust types
bb-connor
committed
c5d36c8
feat(go): add enforcement summary to decision receipt
bb-connor
committed
7e5e469
feat(ts): add enforcement summary to receipts and tagged observer events
bb-connor
committed
20a45c3
feat(ts): add HushGuard enforcement config with validated per-rule overrides
bb-connor
committed
6667975
feat(ts): add HushGuard gate() with monitor mode and panic supremacy
bb-connor
committed
9376fea
feat(ts): emit tagged receipts and observer events from HushGuard gate
bb-connor
committed
fec91ab
feat(python): add enforcement summary to receipts and tagged observer events
bb-connor
committed
762b8e6
feat(python): add HushGuard enforcement config with validated per-rule overrides
bb-connor
committed
78b4cbd
feat(python): add HushGuard gate() with monitor mode and panic supremacy
bb-connor
committed
302b231
feat(python): emit tagged receipts and observer events from HushGuard gate
bb-connor
committed
c70a440
docs: document monitor enforcement mode in core spec and SDK readmes
bb-connor
committed
a193eb4
fix(middleware): validate extension segment in enforcement override keys

bb-connor
and
claude
committed
347cfeb
feat(cli): h2h lint --fix with decision-neutral auto-fixes

bb-connor
and
claude
committed
9efedcb
ci: five-target release binaries with checksums and provenance
bb-connor
committed
2a82765
fix(ci): working release pipeline (runner image, ensure-release, tag guard)

bb-connor
and
claude
committed
6381905
ci: automated Homebrew tap formula updates on release
bb-connor
committed
03000af
fix(ci): fail-closed formula rendering and tap-push auth
bb-connor
committed
0a86765
feat(dist): @hushspec/cli npm wrapper with per-platform binaries
bb-connor
committed
1dbf17a
fix(dist): portable npm shim entry-point detection
bb-connor
committed
2b65a04
docs: installation matrix for brew, npm, and prebuilt binaries
bb-connor
committed
f950ea9
docs(cli): correct lint preview command and caveat wording
bb-connor
committed
f23e759
test(cli): exercise a real fix in the neutrality corpus guard
bb-connor
committed
962c36c
test(schemas): meta-validation and $id guard for published schemas
bb-connor
committed
55bfa03
fix(tests): assert schema formats explicitly under draft 2020-12

bb-connor
and
claude
committed
2278ec5
feat(fmt): preserve leading yaml-language-server modelines
bb-connor
committed
34f1eed
fix(fmt): report parse errors against original line numbers
bb-connor
committed
f9d8b43
feat: schema modelines on shipped policies and init scaffolds

bb-connor
and
claude
committed
444a11e
feat(schemas): serve schemas at their $id URLs; SchemaStore entry and editor docs
bb-connor
committed
b61ffb8
feat(testkit): add portable differential case-bundle format
bb-connor
committed
922e4b6
test(fixtures): add input_inject evaluator fixture and widen action-type enum
bb-connor
committed
b5f5a94
feat(testkit): add case verdicts and in-process Rust oracle
bb-connor
committed
d77c779
feat(testkit): add cross-SDK report comparison with divergence kinds
bb-connor
committed
a5f1d73
feat(testkit): add proptest policy/action generators and bundle generation
bb-connor
committed
f4fc5da
feat(testkit): add hushspec-gen bundle generator binary
bb-connor
committed
2cc74d7
feat(testkit): add fail-closed subprocess harness adapter

bb-connor
and
claude
committed
3cbc0e0
test(testkit): cover subprocess fail-closed paths
bb-connor
committed
46efe87
feat(testkit): add TypeScript differential evaluation harness
bb-connor
committed
68e6a17
fix(evaluate): first-match-wins origin profile tie-break (cross-SDK parity)
bb-connor
committed
f453fc4
feat(testkit): add Python differential evaluation harness
bb-connor
committed
f1e23e2
feat(testkit): add Go differential evaluation harness
bb-connor
committed
a0315f0
feat(testkit): add batch-shrinking divergence minimizer
bb-connor
committed
a21a66d
feat(testkit): emit minimized divergences as evaluator regression fixtures
bb-connor
committed
4b5a285
fix(testkit): fail closed when a divergence can't be a valid fixture

bb-connor
and
claude
committed
8e1a2aa
feat(testkit): add hushspec-difftest differential fuzz runner

bb-connor
and
claude
committed
e1c81ba
fix(testkit): guard minimizer against phantom/out-of-range divergence keys
bb-connor
committed
7dceb08
feat(bench): add criterion benchmarks for evaluate and receipt overhead
bb-connor
committed
a871506
test(bench): gate receipt overhead against roadmap R10 budgets
bb-connor
committed
fd6172d
ci: add differential-fuzz and bench-thresholds jobs

bb-connor
and
claude
committed
fbf60af
ci: add nightly deep-fuzz workflow and testkit docs
bb-connor
committed
abd64f7
chore(tests): clean up clippy lints under --all-targets

bb-connor
and
claude
committed
eba557b
fix(ci): drop --locked from release builds (no committed lockfile)

bb-connor
and
claude
committed
f58f0b5
fix(lint): collapse if into match guard (clippy 1.97 collapsible_if)

bb-connor
and
claude
committed
74ccc7e
chore: remove process/meta-narrative from code comments

bb-connor
and
claude
committed
94131d3
fix(middleware): audit the provider-failure would-block under monitor

bb-connor
and
claude
committed
fd0beac
fix: harden review findings across testkit, lint, and release scripts

bb-connor
and
claude
committed
015f537

Commits on Jul 14, 2026

build: commit Cargo.lock and build release binaries --locked

bb-connor
and
claude
committed
85782eb
fix(cli): require --target for target-based eval action types

bb-connor
and
claude
committed
82cb4c1
fix: resolve cross-SDK evaluation divergences and fail-open paths

bb-connor
and
claude
committed
4bf2bc4
fix(policy): broaden shipped secret detection and close credential-path gaps

bb-connor
and
claude
committed
6ca815c
fix(receipt): keep the zero-overhead disabled-audit path; run cargo fmt

bb-connor
and
claude
committed
8c652b2
fix(receipt): make content_hash optional so the disabled-audit path is schema-valid

bb-connor
and
claude
committed
ec1f8b8
fix(regex): reject catastrophic-backtracking patterns in the safety check

bb-connor
and
claude
committed
674e987
style: cargo fmt (validate.rs, receipt.rs)

bb-connor
and
claude
committed
4ac1e04
feat(detection): wire the content-detection engine into evaluation

bb-connor
and
claude
committed
66eb962
fix(policy): close shipped-policy holes and make regexes engine-agnostic

bb-connor
and
claude
committed
b10accf
fix: cross-SDK validation and detector regex parity

bb-connor
and
claude
committed
6289f59
fix: honor panic --sentinel in eval/test/diff and audit sink-only monitor guards

bb-connor
and
claude
committed
9dd3061
fix: close cross-SDK parity divergences found in the parity audit

bb-connor
and
claude
committed
39ef8c5

Commits on Jul 15, 2026

feat(sdk): resolve `extends: builtin:<name>` in the Python and Go SDKs

bb-connor
and
claude
committed
5149f3f
fix(panic): include input_injection in the TS/Python emergency policy

bb-connor
and
claude
committed
b2071e5
fix(policy): harden ai-agent and recommended shell_commands

bb-connor
and
claude
committed
2f8c73d
fix: close remaining cross-SDK validation and conditions divergences

bb-connor
and
claude
committed
fc25664
fix: close fail-open and robustness gaps from the fifth review

bb-connor
and
claude
committed
7fcb462
chore: harden builtin generators + publish workflow, widen fuzz coverage

bb-connor
and
claude
committed
979ccf6