timmy 2b773ba58c test(release): record the ingress refusal on camera and gate its caption (#16) ...

The demo now picks a committed text fixture that only claims to be a photo, asserts on camera that
nothing was posted to /api/analyze, and keeps manual entry in the same scene. The builder requires
that caption to have painted and records image_ingress_refusal in the manifest; the threat model
names each implemented control, its module, and the tests that enforce it.

2026-10-20 08:21:24 +00:00

..

PHOTO-DATAFLOW-THREAT-MODEL.md

test(release): record the ingress refusal on camera and gate its caption (#16)

2026-10-20 08:21:24 +00:00

PRODUCT-DECISIONS.md

docs: add end-to-end photo data-flow threat model (#20)

2026-10-10 08:03:31 +00:00

STAGING-RUNBOOK.md

feat: add hardened atomic staging deployment

2026-08-21 14:49:28 +00:00

TIMMY-AGENT-POLICY.md

feat: simplify Timmy and add secure Hermes chat

2026-08-20 16:21:00 +00:00