Adversarial review fixes, and the published image becomes the tested one - #2

Merged

MorningLightMountain713 merged 12 commits into

mainfrom

feat/adversarial-review-fixes

Aug 13, 2026

Commits on Aug 13, 2026

feat: the identity records when the object was born, and says which clock said so

MorningLightMountain713
and
claude
committed
93c61ca
fix: a stop reaches the whole run, not only a child

MorningLightMountain713
and
claude
committed
8ed0ef9
test: the container suite measures an identity the way the identity is now written

MorningLightMountain713
and
claude
committed
7486b6d
fix: an operand that contains the other is refused before anything is displaced

MorningLightMountain713
and
claude
committed
0d5f628
fix: neither the measurement nor the marker follows a link planted in its path

MorningLightMountain713
and
claude
committed
40c029e
fix: the identifier and the volume root are checked before they become paths

MorningLightMountain713
and
claude
committed
b1ca9a1
fix: --ordinary-only refuses anything that is not ordinary data, not only links

MorningLightMountain713
and
claude
committed
ac2ae32
docs: what a hostile archive cannot do, and which layer actually stops it

MorningLightMountain713
and
claude
committed
31fc690
fix: the ceiling measures what a result occupies, not what its files say

MorningLightMountain713
and
claude
committed
e80209b
test: the toolchain case checks the implementation, which is what it was for

MorningLightMountain713
and
claude
committed
03f9225
ci: the image that is published is the image that was tested

MorningLightMountain713
and
claude
committed
7ae3f43
test: two failures the local filesystem was hiding

MorningLightMountain713
and
claude
committed
9f17e35