Evaluating security tooling honestly

A dual-lattice admission layer denies writes that inherit untrusted repo text

Version 0.2.0 decides admission by propagating integrity labels through a plan's dependency graph. The interesting cost is that the harness now has to declare, before acting, what the agent intends to do.