CASAN

T

thanhnvandClaude Opus 4.8 7e998f67c2 feat(h5-h6-hardening): Plan-07 Track A — A4 telemetry integrity, A5 cost controls

A4 (V9): telemetry-integrity.sh binds provider-usage.jsonl + cost/metrics.jsonl
  to a signed manifest head. Tampering a token flips the head (MISMATCH); an
  attacker who rewrites the head cannot re-sign it (SIGNATURE_INVALID) without
  the off-repo key. sign-audit-head.sh now also signs telemetry (best-effort).
  Supports CASAN_AUDIT_PRIV/PUB overrides for self-contained verification.
A5 (V12/V13/V14): cost-spike-detect.sh adds an absolute per-call cap
  (CASAN_COST_ABSOLUTE_MAX_TOKENS, enforced from record #1 → catches slow-boil
  and cold-start) and a cumulative budget (CASAN_COST_CUMULATIVE_BUDGET_TOKENS →
  catches under-threshold spray), keeping the existing median×mult spike test.
  Backward compatible: <3 records with no caps still exits 3.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-03 22:25:00 +09:00

.gitea/workflows

fix(ci): self-heal mysql env-file read access in deploy preflight

2026-07-01 22:09:53 +09:00

00_SUBMISSION_PACKAGE

chore(freeze): snapshot demo state before Plan-07 hardening work

2026-07-03 22:03:44 +09:00

AINative_OKR_CASAN5

feat(h5-h6-hardening): Plan-07 Track A — A4 telemetry integrity, A5 cost controls

2026-07-03 22:25:00 +09:00

casan-next-plans

chore(freeze): snapshot demo state before Plan-07 hardening work