3 Commits

Author	SHA1	Message	Date
jenkins	f59f24a427	security(hux): harden backend trust boundaries	2026-08-24 01:31:12 -03:00
jenkins	1b1a14e972	hermes(hux): contract 1.1.0 additive revision and Wave A consolidation ... Adds receipt evidence kind, 422 unprocessable, optional revision on research records, audit_stale on the privacy policy, per-route body caps (25 MiB artifact uploads), promotion checks the project exists, memory rules skip content-free statuses. Handoff ledger covers every Wave A card. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM	2026-08-24 00:48:20 -03:00
jenkins	9f0ffe031c	hermes(hux): HUX-04 artifact workspace and HUX-08 research backends ... Immutable content-addressed artifact versions with If-Match, lineage that must resolve under the caller, unified diffs, promotion; sources/passages/citations with server-side hashing and dedupe, citation integrity checks and revisioned research notebooks. Cross-tenant access is 404 and audited. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM	2026-08-24 00:48:20 -03:00