feat(security): informational Pass-1 scan on every admission + one-shot baseline sweep - #1031

Merged

github-actions[bot] merged 9 commits into

mainfrom

feat/tpa-scan-on-admission

Aug 24, 2026

Commits on Aug 23, 2026

feat(security): informational Pass-1 scan on every admission + one-shot baseline sweep
Dumbris
committed
77054a4
fix(security): close informational-scan gating window + sweep/env fail-closed
Dumbris
committed
41081c6
fix(security): cap informational-scan retries per process
Dumbris
committed
a380dcd
fix(security): honour the auto_baseline_scan kill switch at execution time
Dumbris
committed
f0709b7
fix(security): keep the informational path out of scan mode entirely
Dumbris
committed
e991bbf
fix(security): don't charge a retry for a cancelled sweep scan
Dumbris
committed
617b4c0
fix(security): read the settle handler's server config from storage
Dumbris
committed
a17ebad

Commits on Aug 24, 2026