Repository navigation
Catalog Service v0.20.17 adds safe question definitions, private launch material and explicit answer validation owned by Catalog for selected logical template/version references. Defaults, private Compose and human-only answers never enter public metadata tools. Compose and Stack retain rendering and launch ownership; ordinary Catalog UI/API contracts remain unchanged.
Original qualified Go 1.27.3 CI bytes are published without recompilation. Producer/tag target: 2f70559. Normal PR14 squash merge: f29a367. Both share tree 330323e614442f9410f341b7d74ae60e8d127872. The immutable numeric tag is SSH signed. Original archive SHA-256: 4f83f89763ce325262baf8984782da2c21fd81e3cc22c0a1c76aaa50b2a50f20.
Official Security release gate40941721551 and CodeQL40941820397, including the final no-new-alert aggregator, passed. The original CI archive, raw/effective security evidence, SBOMs, exact scoped builder VEX and qualification manifest are attached.
These private owner routes require the matching B3 Engine to reject /v1-catalog/ai at all public proxy entrances and redirects. Loopback alone is not caller authorization. Live owner/Key checks, encrypted plans, human approval, exact delegated child graph/ledger and runtime observation remain matching Engine responsibilities. Engine358/Server558 do not contain this B3 guard or consume this launch integration. Matching Web/Engine/Server runtime, browser, roles and weak-model launch acceptance remain pending; no whole-frontend completion or deployment is claimed.