00aabfac4d60c4b588ef0486b6daa267cbdaa181
New "H5+ — Governance Hardening" section (before Evidence Pack) demoing the three lowest-harness fixes with on-screen verdicts: - HG1 approval-identity: env-var approver → BLOCKED; reviewer-signed → APPROVED. - HG2 KMS key: sign/verify via Vault Transit + rotate + non-exportable (skip-aware when no Vault; shows the docker one-liner to enable it live). - HG3 WORM audit: ship anchors → in-sync; roll back local audit → AUDIT_GAP_DETECTED. Closer updated: H5 76→~85 line, total 155 checks. Verified end-to-end (exit 0, live Vault: rotate v3 + non-exportable confirmed). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Description
No description provided
648 MiB
Languages
Python
33.4%
Shell
32.4%
TypeScript
23.7%
PowerShell
4.5%
JavaScript
4.2%
Other
1.7%