release: sync develop -> main (security fixes, governance, v0.1.0 prep)#176

Merged

tbitcs merged 7 commits into

mainfrom

May 19, 2026

Commits on May 19, 2026

chore(governance): bump spec_version to 0.11.3.dev416

tbitcs
and
oz-agent
committed
fix: add Session Teardown to AGENTS.md template; kill-session on bootstrap

tbitcs
and
oz-agent
committed
governance: add REQ/TEST 336-340, ARCH 32-35, 4 trace vault seals

tbitcs
and
oz-agent
committed
fix: resolve CodeQL alerts 103-109 and issues #171 #173 #174

tbitcs
and
oz-agent
committed
fix: #175 EDS scanner scan_exclude_dirs/patterns; refactor CodeQL paths

tbitcs
and
oz-agent
committed
fix(security): use os.path.realpath in _safe_resolve — CodeQL recognised sanitiser

tbitcs
and
oz-agent
committed
style: ruff format auditor.py

tbitcs
and
oz-agent
committed