draft: fixed-trace evidence integrity hardening - #7304

Merged

bokelley merged 16 commits into

mainfrom

conductor/addie-fixed-trace-evidence-integrity

Sep 6, 2026

Commits on Sep 6, 2026

fix(addie): harden fixed-trace evidence integrity
bokelley
committed
1e1b634
fix(addie): validate diagnostic ledger evidence
bokelley
committed
08d9ca2
fix(addie): refuse uncalibrated judge dispatch before input access
bokelley
committed
5f467ec
test(addie): prove judge refusal is input-free
bokelley
committed
6fca42a
fix(addie): fail closed without evidence custody
bokelley
committed
9afb0f6
fix(addie): gate all evidence and judge entrypoints
bokelley
committed
5692580
fix(addie): make evidence slice refusal-only
bokelley
committed
6113ef2
fix(addie): isolate fixed-trace evidence prerequisites
bokelley
committed
d1c5844
fix(addie): pin refusal evidence prerequisites
bokelley
committed
271e436
fix(addie): harden fixed-trace prerequisite pinning
bokelley
committed
a29c12f
fix(addie): canonicalize fixed-trace authority pin
bokelley
committed
dd49dc7
fix(addie): pin canonical prerequisite bytes
bokelley
committed
34f7f4b
fix(addie): exhaust fixed trace refusal domains
bokelley
committed
84bdb07
test(addie): require fixed trace rollout typecheck
bokelley
committed
4f59d44
test(addie): verify rollout typecheck wiring
bokelley
committed
53cfdb0
fix(addie): tolerate missing rollout typecheck baselines
bokelley
committed
a405909