Harden per security re-scan + test-suite adequacy plans - #6

Open

Schroedingberg wants to merge 8 commits into

mainfrom

Commits on Jul 12, 2026

refactor: clojure.test/are for tabular test cases

Schroedingberg
and
claude
committed
e1d9efc
fix: contain bot effects — chunked /history, honest failure replies, closed Effect schema, category sanitization, check cmd

Schroedingberg
and
claude
committed
2424a54
ci: SHA-pin actions, step-scope secrets, cosign-sign images, load ledger.main + image smoke test

Schroedingberg
and
claude
committed
6d4c0b7
infra: cosign-verified + health-gated autodeploy, non-root hardened container, metadata firewall, pinned host keys

Schroedingberg
and
claude
committed
27ae182
docs: security TODO -> posture; effect-shape update

Schroedingberg
and
claude
committed
a6f874c

Commits on Jul 13, 2026

refactor: drop the CLI and report rendering — ad-hoc reports come from hledger

Schroedingberg
and
claude
committed
d8e7acd
docs: retire CONTRACT.md — the schemas and ns docstrings are the contract

Schroedingberg
and
claude
committed
8e88c48
infra: drop the persisted-state mode — stateless-only OpenTofu

Schroedingberg
and
claude
committed
e3ff43f