Sealed responses, docs overhaul, and org name fixes#6

Merged

tick10 merged 15 commits into

mainfrom

feature/sealed-responses

Mar 9, 2026

Commits on Mar 7, 2026

feat(crypto): add X25519/NaCl box sealed envelope primitives

Aaron.ClaudeContainer
and
claude
committed
feat(acl): add agent seal key storage and retrieval

Aaron.ClaudeContainer
and
claude
committed
feat(api): add keypair endpoints and sealed response support

Aaron.ClaudeContainer
and
claude
committed
feat(policy): add require_sealed and allow_unseal attestation rules

Aaron.ClaudeContainer
and
claude
committed
feat(cli): add sealed response support — keypair management, auto-decryption, and tests

Aaron.ClaudeContainer
and
claude
committed

Commits on Mar 8, 2026

feat(mcp,api): add sealed MCP mode with server-authoritative unseal policy

Aaron.ClaudeContainer
and
claude
committed
feat(sdk): add sealed mode to Go, Python, and TypeScript SDKs

Aaron.ClaudeContainer
and
claude
committed
docs: add sealed responses documentation and bump version to 1.0.0

Aaron.ClaudeContainer
and
claude
committed
fix(docs): correct keypair generate output description

Aaron.ClaudeContainer
and
claude
committed
fix: add ref-swap guards to CLI/MCP and correct docs

Aaron.ClaudeContainer
and
claude
committed
fix: harden seal key handling, usage text, and SDK edge cases

Aaron.ClaudeContainer
and
claude
committed
docs: snapshot pre-review docs from GPT pass

Aaron.ClaudeContainer
and
claude
committed

Commits on Mar 9, 2026

docs: editorial review, dedup, and LAN deployment guide

Aaron.ClaudeContainer
and
claude
committed
Merge docs/review-pass into feature/sealed-responses

Aaron.ClaudeContainer
and
claude
committed
fix: correct org names across docs, scripts, and SDK

Aaron.ClaudeContainer
and
claude
committed