fix(danger): fingerprinted read ledger (TOCTOU re-gate) + pre-exec content audit for unread-script approvals - #146

Merged

jkyberneees merged 6 commits into

mainfrom

fix/read-ledger-hardening

Aug 27, 2026

Commits on Aug 27, 2026

test(danger,cmd/odek): RED — read-ledger fingerprints + pre-exec script audit
jkyberneees
committed
1d84efc
feat(danger,cmd/odek): GREEN — fingerprinted read ledger + pre-exec script audit
jkyberneees
committed
e52e6f4
docs(security): fingerprinted read ledger + pre-exec content audit
jkyberneees
committed
bbc1171
test(cmd/odek): RED — execution-provenance rules pinned in the system prompt
jkyberneees
committed
900d651
feat(cmd/odek): GREEN — execution-provenance rules in the system prompt
jkyberneees
committed
d07e668
docs(security): execution-provenance prompt layer + scanner-clean default
jkyberneees
committed
035579a