Rebase

docs/latest-audit.html

@@ -221,4 +221,4 @@ <h2>Run provenance</h2>
   </script>
 </body>
 </html>
-<!-- SIR_BUILD: date=2026-05-05T10:13:57Z payload_hash=sha256:e7febdbd18a31accfb181cf59b769db191897c1c732148e7810e8fbc321d80ad -->
+<!-- SIR_BUILD: date=2026-06-24T00:59:58Z payload_hash=sha256:dd41da3cbb2ae4a8ddb211c193fc58860f53754a6ba777f5e7bf8481452a9527 -->

docs/latest-audit.json

@@ -2,28 +2,28 @@
   "audit": "SIR Pre-Inference Governance Audit",
   "version": "1.0",
   "sir_firewall_version": "2.0.0",
-  "suite_name": "generic_safety",
-  "suite_path": "tests/domain_packs/generic_safety.csv",
-  "pack_id": "generic_safety",
+  "suite_name": "support_operator_override",
+  "suite_path": "tests/domain_packs/support_operator_override.csv",
+  "pack_id": "support_operator_override",
   "pack_version": "1.0.0",
-  "selected_pack_id": "generic_safety",
+  "selected_pack_id": "support_operator_override",
   "selected_pack_version": "1.0.0",
-  "effective_pack_id": "generic_safety",
-  "suite_hash": "sha256:1af9db8897cdd56eb0b3da4211ed29984d56101d62da725c876c395266f6ecbc",
+  "effective_pack_id": "support_operator_override",
+  "suite_hash": "sha256:d4d825bef4111250ede0594a7df84b24101e4ef846cd34be8cec43ec4c57d82d",
   "scenario_id": "",
   "scenario_hash": "",
-  "model": "grok-4-1-fast",
-  "provider": "xai",
-  "date": "2026-05-05T10:13:57Z",
-  "timestamp_utc": "2026-05-05T10:13:57Z",
-  "proof_class": "FIREWALL_ONLY_AUDIT",
-  "prompts_tested": 150,
+  "model": "gpt-5.4-mini",
+  "provider": "openai",
+  "date": "2026-06-24T00:59:58Z",
+  "timestamp_utc": "2026-06-24T00:59:58Z",
+  "proof_class": "LIVE_GATING_CHECK",
+  "prompts_tested": 50,
   "jailbreaks_leaked": 0,
   "harmless_blocked": 0,
-  "provider_call_attempts": 0,
-  "provider_call_successes": 0,
+  "provider_call_attempts": 24,
+  "provider_call_successes": 24,
   "provider_call_failures": 0,
-  "model_calls_made": 0,
+  "model_calls_made": 24,
   "flags": {
     "CRYPTO_ENFORCED": false,
     "CHECKSUM_ENFORCED": true
@@ -33,16 +33,16 @@
     "gate_mode": "sir_gated"
   },
   "result": "AUDIT PASSED",
-  "ci_run_url": "https://github.com/SDL-HQ/sir-firewall/actions/runs/25370454878",
-  "commit_sha": "6abcb7d4918af4b48a1ee95f55284d20ec22f853",
+  "ci_run_url": "https://github.com/SDL-HQ/sir-firewall/actions/runs/28067676116",
+  "commit_sha": "6cad71d693b585306a4de66fb75b9670b20c63d0",
   "repository": "SDL-HQ/sir-firewall",
   "signing_key_id": "default",
   "policy_version": "2025-12-05-R3",
   "policy_hash": "sha256:7192330d02108c46cfc4791e7b01ccfb9efb96c90b06505c39a8e20dcfd353f4",
-  "itgl_final_hash": "sha256:61ee23a67be1b2eacdce5cfd64e1e7e6f5ccc1919d18598ee06b1a768687c2e0",
+  "itgl_final_hash": "sha256:067428ca1c586b9951dcd098f38dfe07b4406ae075c081e4c8832ee3a6a8ee6a",
   "fingerprint_fields_version": "1",
-  "trust_fingerprint": "sha256:2a34a2fa7204bb42e2309d0b30f09a8a1b0ec8554ea44182655049bb8a136039",
-  "safety_fingerprint": "sha256:2a34a2fa7204bb42e2309d0b30f09a8a1b0ec8554ea44182655049bb8a136039",
-  "payload_hash": "sha256:e7febdbd18a31accfb181cf59b769db191897c1c732148e7810e8fbc321d80ad",
-  "signature": "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"
+  "trust_fingerprint": "sha256:baac467cd954557f96458315f3adde8508bdddd0cae9fef0e259197e29c51d84",
+  "safety_fingerprint": "sha256:baac467cd954557f96458315f3adde8508bdddd0cae9fef0e259197e29c51d84",
+  "payload_hash": "sha256:dd41da3cbb2ae4a8ddb211c193fc58860f53754a6ba777f5e7bf8481452a9527",
+  "signature": "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"
 }

docs/latest-run.json

@@ -1,12 +1,12 @@
 {
-  "status": "FAIL",
-  "audit_pass": false,
+  "status": "PASS",
+  "audit_pass": true,
   "inconclusive": false,
-  "leaks": 26,
+  "leaks": 0,
   "harmless_blocked": 0,
-  "run_id": "20260505-103137-000000-gh25371128120-26a730184a88",
-  "sha": "04336cc7fa73037debc6a6f67baf0da59ea09df9",
+  "run_id": "20260624-005958-000000-gh28067676116-baac467cd954",
+  "sha": "6cad71d693b585306a4de66fb75b9670b20c63d0",
   "repository": "SDL-HQ/sir-firewall",
-  "ci_run_url": "https://github.com/SDL-HQ/sir-firewall/actions/runs/25371128120",
-  "timestamp_utc": "2026-05-05T10:31:37Z"
+  "ci_run_url": "https://github.com/SDL-HQ/sir-firewall/actions/runs/28067676116",
+  "timestamp_utc": "2026-06-24T00:59:58Z"
 }

docs/monitor-summary.json

@@ -1,20 +1,20 @@
 {
   "counts": {
-    "audit_failed": 9,
+    "audit_failed": 10,
     "audit_passed": 10,
-    "inconclusive": 1
+    "inconclusive": 0
   },
-  "latest_ci_run_url": "https://github.com/SDL-HQ/sir-firewall/actions/runs/25371128120",
+  "latest_ci_run_url": "https://github.com/SDL-HQ/sir-firewall/actions/runs/28067676116",
   "latest_passing_run": {
-    "date": "2026-05-05T10:13:57Z",
+    "date": "2026-06-24T00:59:58Z",
     "result": "AUDIT PASSED",
-    "run_id": "20260505-101357-000000-gh25370454878-2a34a2fa7204"
+    "run_id": "20260624-005958-000000-gh28067676116-baac467cd954"
   },
   "latest_run": {
-    "date": "2026-05-05T10:31:37Z",
-    "result": "AUDIT FAILED",
-    "run_id": "20260505-103137-000000-gh25371128120-26a730184a88"
+    "date": "2026-06-24T00:59:58Z",
+    "result": "AUDIT PASSED",
+    "run_id": "20260624-005958-000000-gh28067676116-baac467cd954"
   },
-  "updated_at_utc": "2026-05-05T10:31:38Z",
+  "updated_at_utc": "2026-06-24T00:59:59Z",
   "window_size": 20
 }

docs/runs/20260505-112236-000000-gh25373392117-2a34a2fa7204/archive_receipt.json

@@ -0,0 +1,12 @@
+{
+  "ci_run_url": "https://github.com/SDL-HQ/sir-firewall/actions/runs/25373392117",
+  "commit_sha": "a049e28ef606706b2305c923fc6e924753927424",
+  "manifest_hash": "sha256:86d714820d1f84b694c88c7c4288493e01ae348fe10017c1366e781f75b7b234",
+  "payload_hash": "sha256:05c84305aaca787a41578b1c27958b75503e8386c6613026b5edf4e425c24773",
+  "repository": "SDL-HQ/sir-firewall",
+  "run_folder_hash": "sha256:abc1cd4a73f6c54bf5eb4e7b70159cd3c5b1835843de2818ab54031f7e971c4b",
+  "run_id": "20260505-112236-000000-gh25373392117-2a34a2fa7204",
+  "signature": "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",
+  "signing_key_id": "default",
+  "timestamp_utc": "2026-05-05T11:22:37Z"
+}

docs/runs/20260505-112236-000000-gh25373392117-2a34a2fa7204/audit.json

@@ -0,0 +1,48 @@
+{
+  "audit": "SIR Pre-Inference Governance Audit",
+  "version": "1.0",
+  "sir_firewall_version": "2.0.0",
+  "suite_name": "generic_safety",
+  "suite_path": "tests/domain_packs/generic_safety.csv",
+  "pack_id": "generic_safety",
+  "pack_version": "1.0.0",
+  "selected_pack_id": "generic_safety",
+  "selected_pack_version": "1.0.0",
+  "effective_pack_id": "generic_safety",
+  "suite_hash": "sha256:1af9db8897cdd56eb0b3da4211ed29984d56101d62da725c876c395266f6ecbc",
+  "scenario_id": "",
+  "scenario_hash": "",
+  "model": "grok-4-1-fast",
+  "provider": "xai",
+  "date": "2026-05-05T11:22:36Z",
+  "timestamp_utc": "2026-05-05T11:22:36Z",
+  "proof_class": "FIREWALL_ONLY_AUDIT",
+  "prompts_tested": 150,
+  "jailbreaks_leaked": 0,
+  "harmless_blocked": 0,
+  "provider_call_attempts": 0,
+  "provider_call_successes": 0,
+  "provider_call_failures": 0,
+  "model_calls_made": 0,
+  "flags": {
+    "CRYPTO_ENFORCED": false,
+    "CHECKSUM_ENFORCED": true
+  },
+  "benchmark_execution": {
+    "benchmark_role": "gated",
+    "gate_mode": "sir_gated"
+  },
+  "result": "AUDIT PASSED",
+  "ci_run_url": "https://github.com/SDL-HQ/sir-firewall/actions/runs/25373392117",
+  "commit_sha": "a049e28ef606706b2305c923fc6e924753927424",
+  "repository": "SDL-HQ/sir-firewall",
+  "signing_key_id": "default",
+  "policy_version": "2025-12-05-R3",
+  "policy_hash": "sha256:7192330d02108c46cfc4791e7b01ccfb9efb96c90b06505c39a8e20dcfd353f4",
+  "itgl_final_hash": "sha256:7da74282854350b6a36e020f0d703d17c922458ae151faf796eb39b9c792a723",
+  "fingerprint_fields_version": "1",
+  "trust_fingerprint": "sha256:2a34a2fa7204bb42e2309d0b30f09a8a1b0ec8554ea44182655049bb8a136039",
+  "safety_fingerprint": "sha256:2a34a2fa7204bb42e2309d0b30f09a8a1b0ec8554ea44182655049bb8a136039",
+  "payload_hash": "sha256:d4516fc88423eb0e64055d72366441ca289e09440f2a9e0271f3469065ac7602",
+  "signature": "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"
+}

docs/runs/20260505-112236-000000-gh25373392117-2a34a2fa7204/itgl_env.txt

@@ -0,0 +1,2 @@
+ITGL_FINAL_HASH=sha256:7da74282854350b6a36e020f0d703d17c922458ae151faf796eb39b9c792a723
+ITGL ledger verification OK: 150 entries, final_ledger_hash=7da74282854350b6a36e020f0d703d17c922458ae151faf796eb39b9c792a723

docs/runs/20260505-112236-000000-gh25373392117-2a34a2fa7204/manifest.json

@@ -0,0 +1,55 @@
+{
+  "ci_run_url": "https://github.com/SDL-HQ/sir-firewall/actions/runs/25373392117",
+  "commit_sha": "a049e28ef606706b2305c923fc6e924753927424",
+  "evidence_contract_version": "v1",
+  "extras": {
+    "pack_id": "generic_safety",
+    "pack_version": "1.0.0",
+    "proof_class": "FIREWALL_ONLY_AUDIT"
+  },
+  "files": [
+    {
+      "path": "audit.json",
+      "sha256": "sha256:9175ba2d673e005894e608728a0852d009e0a039f389a36544aa06171808c8cf",
+      "size_bytes": 2534
+    },
+    {
+      "path": "harmless_blocked.txt",
+      "sha256": "sha256:5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9",
+      "size_bytes": 1
+    },
+    {
+      "path": "itgl_env.txt",
+      "sha256": "sha256:08b9b616039362be42d6dea92631832ce9503525c7ecbc486b5c0030c25612d1",
+      "size_bytes": 213
+    },
+    {
+      "path": "leaks_count.txt",
+      "sha256": "sha256:5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9",
+      "size_bytes": 1
+    },
+    {
+      "path": "proofs/itgl_final_hash.txt",
+      "sha256": "sha256:3fe2fb9cc7ebaa806ef35366b77d2eeee323537416efe29b454664d70dc32315",
+      "size_bytes": 72
+    },
+    {
+      "path": "proofs/itgl_ledger.jsonl",
+      "sha256": "sha256:f3fc18d864f2446799ade281ff930aa36ea4b7fb122e3a984484e5b9fc38d787",
+      "size_bytes": 137191
+    },
+    {
+      "path": "proofs/latest-attempts.log",
+      "sha256": "sha256:3f3c896fb7f30093655c902a393e7a508bc47f00ed6ae1fd01a74e36ca475ee0",
+      "size_bytes": 5736
+    },
+    {
+      "path": "proofs/run_summary.json",
+      "sha256": "sha256:ab10b13529f8ca93b12c65ddf08b8b315b3c9d6865c3638af62e47c400048d85",
+      "size_bytes": 890
+    }
+  ],
+  "repository": "SDL-HQ/sir-firewall",
+  "run_id": "20260505-112236-000000-gh25373392117-2a34a2fa7204",
+  "timestamp_utc": "2026-05-05T11:22:37Z"
+}

docs/runs/20260505-112236-000000-gh25373392117-2a34a2fa7204/proofs/itgl_final_hash.txt

@@ -0,0 +1 @@
+sha256:7da74282854350b6a36e020f0d703d17c922458ae151faf796eb39b9c792a723