Map untrusted-ingest surface (ingest.materialize http/I6, verdict-inbox load, promote_verdict, future received-bundle) vs first-party paths; verdict = planned, wire scan/sanitize before M3 as S2.4/S2.5 extension. Plan only — guard not wired. shared/ hardening owned by commons session. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0145ZKPLMVeqM47z2jxxokym |
||
|---|---|---|
| .. | ||
| fase1-spikes | ||
| plan | ||
| rapport | ||
| research | ||
| 2026-06-24-two-approaches-brief.md | ||
| 2026-06-26-fot-i-bakken.md | ||
| 2026-07-15-foundry-auth-recipe.md | ||
| extending.md | ||
| review-2026-07.md | ||