vikingowl 3ae40083f1 docs(security): Wave 2 plan — incognito coherence ...

Plan for the second hardening wave. Six findings closed in one PR:
W2-1 router rejects forced non-local under local-only; W2-2 persist
store consults IncognitoMode + 0o600/0o700 perms; W2-3 TUI seeds
incognito from firewall; W2-4 quality/outcome gates read firewall
instead of CLI flag; W2-5 session perms 0o600; W2-6 remove dead
IncognitoMode.LocalOnly field.

2026-05-19 22:44:20 +02:00

..

2026-05-07-gnoma-roadmap.md

feat(slm): Wave C — SLM classifier, MaxComplexity routing, CLI subcommands, TUI status

2026-05-07 16:44:32 +02:00

2026-05-19-post-slm-unlock.md

feat(tui): /profile slash command + status-bar profile badge (Phase C-3)

2026-05-19 21:59:11 +02:00

2026-05-19-security-wave1-safeprovider.md

feat(security): add SafeProvider boundary wrapper (W1-1)

2026-05-19 22:28:46 +02:00

2026-05-19-security-wave2-incognito.md

docs(security): Wave 2 plan — incognito coherence

2026-05-19 22:44:20 +02:00