feat(security): US1 deterministic offline baseline scanner (Spec 077)#786

Merged

Dumbris merged 9 commits into

mainfrom

077-us1-baseline

Jul 2, 2026

Commits on Jul 1, 2026

feat(security): deterministic offline baseline scanner (Spec 077 US1)
Dumbris
committed
feat(security): gate Approve modal on baseline dangerous findings (Spec 077 US1)
Dumbris
committed
test(security): recognize phrase_injection as a gated detect category (Spec 077 US1)
Dumbris
committed
fix(security): tier-driven approval gate + preserve baseline classification
Dumbris
committed
fix(detect): restore secret + legacy-phrase coverage; strengthen HARD FP control
Dumbris
committed
fix(detect): three-way position model to close recall bypass without reopening FP (Spec 077 US1)
Dumbris
committed

Commits on Jul 2, 2026