Every claim gstack makes now binds to the content it was made on
- Add bin/gstack-wtree for working-tree content fingerprint
- Add bin/gstack-evidence verification-evidence ledger that wraps commands transparently and grades evidence as FRESH/STALE/MISSING per label
- Add lib/tracker-guard.ts and bin/gstack-issue-guard for trust envelope on tracker text
- Add /careful HIGH tier and additive-only project warn patterns
- Add CI wiring scanner that fails the suite on raw tracker-text reads outside the guard
- Review records now stamp commit_full/tree/dirty/wtree authoritatively with working-tree content fingerprints
- A review of identical content grades CURRENT through rebases, amends, and squashes
- /ship Step 5 test lanes now run wrapped with per-lane labels and per-run logs
- /land-and-deploy checks the ledger first and cites fresh evidence
- /document-release PR/MR body updates use a two-artifact flow with a banner tripwire
- /freeze: deny JSON silently no-oped on quote/newline paths
- /freeze: internal spaces in the boundary path were stripped
- /freeze: symlink final components weren't resolved
- /freeze: JSON extractor truncated at escaped quotes and failed open
- /freeze: missing helper file passed edits through instead of blocking
From gstack
Reviews and test results used to be prose claims: review is recent meant a commit-count guess that a rebase could crash. Both now carry a working-tree content fingerprint. A review of identical content grades CURRENT through rebases, amends, and squashes. A test run recorded by the new bin/gstack-evidence ledger stays citable at /ship's verification gate only while the content is byte-identical, the command hash matches, and nothing edited the tree mid-run.
Added: bin/gstack-wtree — working-tree content fingerprint. bin/gstack-evidence — verification-evidence ledger: run wraps any command transparently; check grades FRESH/STALE/MISSING per label. lib/tracker-guard.ts + bin/gstack-issue-guard — trust envelope for tracker text. /careful HIGH tier and additive-only project warn patterns. CI wiring scanner failing the suite on raw tracker-text reads outside the guard.
Changed: Review records stamp commit_full/tree/dirty/wtree authoritatively. /ship Step 5 test lanes run wrapped with per-lane labels and per-run logs. /land-and-deploy checks the ledger first and cites fresh evidence. /document-release PR/MR body updates use a two-artifact flow with a banner tripwire.
Fixed: /freeze: five boundary defects — deny JSON silently no-oped on quote/newline paths, internal spaces in the boundary path were stripped, symlink final components weren't resolved, the JSON extractor truncated at escaped quotes and failed open, and a missing helper file passed edits through instead of blocking.