Repository navigation
The two-level audit day. One line first: a partial result is still not a pass.
- The audit runs in two levels: the report's findings are candidates, and each finding gets a verdict and a disposition with file-and-line evidence, plus local per-rule precision metrics.
- Detector precision: published cryptographic constants, public keys and test vectors stay quiet; alias, concatenation, fallback and doc-example classes measured and fixed; the JWT branch tightened.
- Governance stays fail-closed: accepts name a rule and a path, and refusals suggest the closest valid ids.
- The report names rule ids, carries an information band, and the CLI gained --list-rules and real --help; unknown flags run nothing.