Grant Whitmer c96d1d3102 canary: guard both forgery shapes now that real verification is live ...

The EPT-shaped forgery is the one that matters after G3.2 — it is what
signature verification actually guards. The JWT-shaped one still exercises the
human gate. Both must_refuse; a 2xx on either pages.

Verified live: forged EPT -> 401 ept_invalid, forged JWT -> 503,
genuine EPT -> 200.

Co-Authored-By: Claude (Fable 5) <noreply@anthropic.com>

2026-08-13 23:13:44 -04:00

..

backup.sh

G0.9: nightly backup — the prerequisite for becoming the daily driver

2026-08-12 21:47:46 -04:00

canary.py

canary: guard both forgery shapes now that real verification is live

2026-08-13 23:13:44 -04:00

import_from_github.py

fix: the --all-as-mirrors flag itself was never added

2026-08-12 22:43:22 -04:00

sync_from_github.sh

URGENT FIX: reverse the sync — GitHub is the source of truth, not Windy Git

2026-08-12 22:11:34 -04:00

vocab_audit.py

G0: cell substrate — invariants made executable

2026-08-11 14:19:28 -04:00