Garry Tan a8c295d49d fix: address pre-landing review (codex) on the carve ...

- cso section: add a scope-gate header so '--owasp' (and other scoped modes)
  run only their selected phases, not every phase bundled in the section
  ('execute in full' no longer overrides Mode Resolution).
- carve-guard-checks: gateAfterStop now compares against the LAST STOP, not the
  first, so a gate stranded between two STOPs in a multi-STOP skeleton fails.
- TODOS: behavioral section-loading hermeticity (verifier matches global-install
  path, not the fixture) — pre-existing in auq-sdk-capture.ts, deferred.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-07 18:18:02 -07:00

..

audit-phases.md

fix: address pre-landing review (codex) on the carve

2026-06-07 18:18:02 -07:00

audit-phases.md.tmpl

fix: address pre-landing review (codex) on the carve

2026-06-07 18:18:02 -07:00

manifest.json

feat: carve cso into skeleton + on-demand section (security-safe)

2026-06-07 17:57:50 -07:00