harden untrusted-input, offline embedders, model_hash gate, CI & provenance#59

brennercruvinel merged 4 commits into

mainhoffresearch/nest:mainfrom

hardening/audit-remediationhoffresearch/nest:hardening/audit-remediationCopy head branch name to clipboard