Kjell Tore Guttormsen cae99722a0 docs(plan): llm-ingestion-guard adoption — planned at future untrusted ingest boundaries ... Score the guard brief's §7 checklist against the commons-specified architecture: all implemented ingest paths (file/sql) are first-party, so the decisive untrusted-ingest box is currently NO. Record the two designed untrusted boundaries where the guard belongs when built — the http/MCP connector (sanitize + scan-before- persist at ingest materialization) and a received-external OKF bundle (okf.import_bundle) — and explicitly exclude the promotion gate as a first-party path the guard must not wire. Plan only; the guard is not implemented. Add .gitignore keeping STATE.md LOCAL-ONLY (commons is subtree-consumed and open-publish-intended; STATE must never reach a consumer's shared/ or a public mirror). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-07-16 07:38:37 +02:00
..
plan	docs(plan): llm-ingestion-guard adoption — planned at future untrusted ingest boundaries	2026-07-16 07:38:37 +02:00