open/portfolio-optimiser-commons
1
0
Fork 0
Code Issues Releases Activity

docs(plan): llm-ingestion-guard adoption — planned at future untrusted ingest boundaries

Browse source 
Score the guard brief's §7 checklist against the commons-specified architecture:
all implemented ingest paths (file/sql) are first-party, so the decisive
untrusted-ingest box is currently NO. Record the two designed untrusted boundaries
where the guard belongs when built — the http/MCP connector (sanitize + scan-before-
persist at ingest materialization) and a received-external OKF bundle (okf.import_bundle)
— and explicitly exclude the promotion gate as a first-party path the guard must not
wire. Plan only; the guard is not implemented.

Add .gitignore keeping STATE.md LOCAL-ONLY (commons is subtree-consumed and
open-publish-intended; STATE must never reach a consumer's shared/ or a public mirror).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Kjell Tore Guttormsen 2026-07-16 07:38:37 +02:00
commit cae99722a0
2 changed files with 168 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
.gitignore vendored Normal file
View file

@ -0,0 +1,8 @@
# Operational continuity state — LOCAL-ONLY, never committed.
# Rationale: commons is subtree-consumed (a committed root STATE.md would land in every
# consumer's shared/STATE.md) and is intended for open publication (STATE must never reach
# a public mirror). The guard roll-up greps STATE.md locally, so local-only is sufficient.
/STATE.md
# Local-scoped notes/overrides convention (KTG global): never mirrored.
*.local.md