llm-ingestion-okf/src/llm_ingestion_okf
Kjell Tore Guttormsen 7fe073ac61 docs(security): state plainly that Door A is ungated
The module docstring and README claimed the library "calls the guard at
every persist gate". That described the intended end state in the present
tense. Door A -- the only door shipped -- has zero runtime dependencies and
calls no guard function before writing to disk.

Both places now say so, and state that gating external or untrusted content
is the caller's responsibility (okf.import_bundle, or prepare_input /
screen_output) until the persist gates land with Doors B and C.

Reported as F2 in a dogfood review by claude-playlist-corpus, which read the
earlier wording as safe-by-default and had to wire the gating itself.

No behavior change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WdVgowYC4LARgvNdNMiuvz
2026-07-19 10:09:25 +02:00
..
__init__.py docs(security): state plainly that Door A is ungated 2026-07-19 10:09:25 +02:00
connectors.py feat(errors): stable machine-readable codes on IngestError 2026-07-17 04:01:04 +02:00
errors.py feat(errors): stable machine-readable codes on IngestError 2026-07-17 04:01:04 +02:00
manifest.py feat(errors): stable machine-readable codes on IngestError 2026-07-17 04:01:04 +02:00
materialize.py feat(errors): stable machine-readable codes on IngestError 2026-07-17 04:01:04 +02:00
py.typed feat(typing): ship the PEP 561 py.typed marker 2026-07-17 03:46:51 +02:00
render.py feat(errors): stable machine-readable codes on IngestError 2026-07-17 04:01:04 +02:00