Full-project review remediation: 163 findings + generation-based Llama-Guard + two-pass Opus/Sonnet review#70

Merged

cemililik merged 10 commits into

mainfrom

Jul 19, 2026

Commits on Jul 15, 2026

fix(review-wave-1): resolve 4 critical + co-located findings

cemililik
and
claude
committed
fix(review-wave-2a): config secret leak, audit robustness, judge/merge/data-audit

cemililik
and
claude
committed
fix(review-wave-2b): SSRF CGNAT, ingest atomicity, approval race, audit robustness

cemililik
and
claude
committed
fix(review-wave-2c): cache/export signals, wizard robustness, doc-drift sweep

cemililik
and
claude
committed
fix(review-wave-3a): CLI flags/exclusivity, data validation, CI hardening

cemililik
and
claude
committed
fix(review-wave-3b): finish doc-drift sweep, enforce schema-drift guard --strict

cemililik
and
claude
committed
feat(safety): generation-based Llama-Guard scoring (default classifier now works)

cemililik
and
claude
committed

Commits on Jul 16, 2026

Commits on Jul 19, 2026

fix(ci): ruff-format the safety notebook; tighten no-network allowlist

cemililik
and
claude
committed