Where Goshawk opened the doors, Sentinel stands guard over what comes through them.
GovernedNavigatorLoop (querygraph answer, MCP tool answer_question): question → semantic search (synonyms, bigrams) → RBAC+ODRL receipts (denied sources named as off-limits, never planned) → SQL plans over allowed Sail sources → any LLM via openai_compatible_llm (Ollama, vLLM, llama.cpp, LM Studio) or the deterministic golden baseline → signed TypeDID envelope + schema-valid OpenLineage + Ed25519 attestation.
querygraph.api_auth: mints the path- and body-bound Ed25519 x-qg-envelope headers that qg-rust's serve --require-auth demands — proven live against the running server in the equivalence suite (401 without, 200 with).
Tracks the 0.12 substrate wave: Grust 0.12.0 "Lobster", TypeSec 0.12.0 "Torcello", LakeCat 0.3.0 "Ocelot".
See CHANGELOG.md.