3 Commits

Author	SHA1	Message	Date
jenkins	f59f24a427	security(hux): harden backend trust boundaries	2026-08-24 01:31:12 -03:00
jenkins	1b1a14e972	hermes(hux): contract 1.1.0 additive revision and Wave A consolidation ... Adds receipt evidence kind, 422 unprocessable, optional revision on research records, audit_stale on the privacy policy, per-route body caps (25 MiB artifact uploads), promotion checks the project exists, memory rules skip content-free statuses. Handoff ledger covers every Wave A card. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM	2026-08-24 00:48:20 -03:00
jenkins	6a5e0d872b	hermes(hux): HUX-11 foundation service core with threat and data models ... Stdlib per-tenant service: trusted-header identity (router/relay/worker, constant-time keys, slot pinned to the pod), fail-closed card flags with capability negotiation, tenant-scoped store (atomic writes, revisions, append-only ledgers, content-addressed blobs, manifest), audit outcome for every request, and the /hux/v1 pipeline that maps errors to hux.error.v1. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM	2026-08-24 00:48:20 -03:00