Commit Graph

4 Commits

Author SHA1 Message Date
James 2fc48d9637 Add agent-authored PR workflow to Part 10
- Agent PR workflow with full context requirements
- PR template for agents with security checklist
- Session ID tracking for audit trail
- Human review requirements for security-critical changes
- Future state: limited auto-merge authority
2026-04-08 14:34:43 -04:00
James 00f21464c3 Add Part 10 — Git workflow
- Commit message format (imperative mood, 50 char subject, area prefixes)
- Commit early/often philosophy
- When to amend vs. new commit
- Push guidelines (never force main, destructive operations need approval)
- Repository hygiene (what to commit, .gitignore maintenance)
- Signed commits noted for future
2026-04-08 13:53:52 -04:00
James 199495cdd8 Add Part 8 (Compliance) and Part 9 (Localization) with user feedback
- F30/F31: Added FIPS 140-3, CGO avoidance, compiler optimizations (Cardinal Rule #3.5)
- F32: Differentiated audit retention: 7 years (paying) vs 90 days (non-paying)
- F33: Noted Zurich central addresses cross-border compliance
- F34: RTL explicitly not a priority
- F35: Form field detection kept unaddressed as core evolving feature
- F36: Already agreed on LLM methodology
2026-04-08 13:52:59 -04:00
James 724f64bda5 Update CLAVITOR-PRINCIPLES.md with all feedback fixes
- Added document version header (F25)
- Added test fixture key material rule with 32x same byte pattern (F21)
- Added LLM-only checks, removed grep emphasis (F26)
- Fixed Section A duplication and renumbered sections
- Fixed 'entire universe' -> 'primary universe' (F28)
- Fixed key tier table formatting (F29)
- Added escalation path with permanent ban rules (F23)
- Added note about master_key/L3/P3 being exceptionally rare terms
- Added Section C for test fixture security
- Created lib/errors.go with event registry and error handling flow
2026-04-08 13:48:54 -04:00