v1.0.0 release prep: federation hardening, secret scanner, CI gates#12

Merged

68 commits merged into

mainfrom

May 30, 2026

Commits on May 18, 2026

Commits on May 19, 2026

docs(reqs): defer Filigree-emission requirements to v0.2 (T2)

tachyon-beep
and
claude
committed
release: v1.0 publish prep — README + tutorial + workflow + four fixes

tachyon-beep
and
claude
committed
chore: backfill filigree v2.0 bootstrap artifacts
tachyon-beep
committed
fix(wp5): C1-C4 critical scanner gaps (clarion-55fc5aa885)

tachyon-beep
and
claude
committed
fix(wp5): I13-I16 loud-fail sweep (clarion-55fc5aa885)

tachyon-beep
and
claude
committed
fix(wp5): I5 ADR-013 audit-trail fidelity (clarion-55fc5aa885)

tachyon-beep
and
claude
committed
test(wp5): I6/I7/I10/I11/I12 coverage gaps (clarion-55fc5aa885)

tachyon-beep
and
claude
committed
docs(wp5): I17 task-reference sweep (clarion-55fc5aa885)

tachyon-beep
and
claude
committed
style(wp5): apply rustfmt + clippy doc-markdown fixes (clarion-55fc5aa885)

tachyon-beep
and
claude
committed
C0 docs: pin Loom federation read contract decisions
tachyon-beep
committed
C2 fix: remove synthetic file identity branch
tachyon-beep
committed
C5 C11 fix: resolve cataloged files without empty hash fallback
tachyon-beep
committed
C1 C13 fix: classify HTTP read errors
tachyon-beep
committed
C6 C12 fix: add HTTP instance capability handshake
tachyon-beep
committed
C3 test: pin HTTP read API federation fixtures
tachyon-beep
committed
C4 fix: enforce HTTP read API loopback trust model
tachyon-beep
committed
C7 C8 C9 fix: harden HTTP read runtime
tachyon-beep
committed
C14 C15 C16 C18 C19 fix: finish medium hardening disposition
tachyon-beep
committed
fix: satisfy workspace clippy gate for HTTP hardening
tachyon-beep
committed
fix: complete federation audit follow-ups
tachyon-beep
committed
feat(http_read): return 403 BRIEFING_BLOCKED for blocked entities

tachyon-beep
and
claude
committed
feat(http_read): require Authorization: Bearer for /api/v1/files

tachyon-beep
and
claude
committed
feat(http_read): add POST /api/v1/files/batch + document path normalization

tachyon-beep
and
claude
committed
feat(http_read): improve code formatting and readability in HTTP read API
tachyon-beep
committed
chore(plugin): bump Python plugin to 1.0.0 + Beta classifier

tachyon-beep
and
claude
committed
docs(release): prepare repo for 1.0.0 release

tachyon-beep
and
claude
committed
fix(llm_provider): always pass --tools to Claude provider (security)

tachyon-beep
and
claude
committed
ci(release): gate publish on verify suite + portability + dynamic sdist

tachyon-beep
and
claude
committed
docs(release): rebrand v0.1 docset to v1.0 and soften tag-existence claim

tachyon-beep
and
claude
committed
docs(adr): write ADR-034 for Sprint 3 federation HTTP read API hardening

tachyon-beep
and
claude
committed
chore(release-hygiene): ADR count, Sprint 3 closure, RUSTDOCFLAGS gate, version lockstep

tachyon-beep
and
claude
committed
fix(secret_scan): clear stale briefing_blocked on cleaned sidecars

tachyon-beep
and
claude
committed
fix(secret_scan): anchor ID must match ADR-003 entity-id grammar

tachyon-beep
and
claude
committed
chore(pr-review): doc drift + pin Python 3.11 in ci.yml rust job

tachyon-beep
and
claude
committed

Commits on May 20, 2026