v1.3.0: untrusted-content coverage (s9 + s11), blind-judge replication, and a SKILL/AGENTS drift guard - #1

Closed

wwk5q8z6kk-bit wants to merge 4 commits into

Sahir619:mainfrom

wwk5q8z6kk-bit:v1.3.0-poisoned-evidence

Commits on Jul 14, 2026

v1.3.0: evidence is data, never instructions (round 11, s9 poisoned-evidence trap)

clifferchance
and
claude
committed
f31f6f8

Commits on Jul 15, 2026

Round 11b: blind-judge replication corrects the intent-gate claim to 3 of 4

clifferchance
and
claude
committed
9ded22e
CI: SKILL/AGENTS sync guard; fixes the drift it caught on first run

clifferchance
and
claude
committed
5e3a0e1
Round 12: second injection channel (tool output) + widen the hook

clifferchance
and
claude
committed
ea62125