📦 PR #72 Merged: GH-67 Fix + Security Hardening (188 tests passing)

[quantamixsol]

PR #72 (merged, CI ✅) resolves 3 bugs surfaced by GH-67:

1. /dev/null diff parsing — apply_diff() now supports creating new files from /dev/null diffs. Previously returned silent failure.
2. _coerce_bool trap — bool("false") == True in Python eliminated; MCP string booleans now parse correctly via allowlist pattern.
3. Write error surfacing — apply_diff failures now surfaced in MCP response metadata.write_error (was silently swallowed as logger.warning).

Security

CWE-22 path traversal containment — user-supplied paths validated against project root before any file I/O. Traversal attempts rejected.

Audit trail persistence — every content gate decision now logged to append-only JSONL governance log (SOC2/ISO27001).

Quality

✅ 188 tests passing. Zero regressions. All CI gates green (3.10, 3.11, 3.12 + Windows + Ubuntu).

pip install --upgrade graqle