feat(shields): seal locked files with SHA-256 and detect content drift - #4460

Merged

cv merged 9 commits into

mainfrom

fix/4243-shields-content-seal

May 30, 2026

Commits on May 28, 2026

fix(shields): seal locked files with SHA-256 and detect content drift
laitingsheng
committed
fa29a39

Commits on May 29, 2026

fix(shields): seal legacy lockdowns, refuse to launder hash failures
laitingsheng
committed
ff201d5
Merge remote-tracking branch 'origin/main' into fix/4243-shields-content-seal
laitingsheng
committed
f93e3cc
fix(shields): gate legacy seal, split recovery hint, harden e2e backup
laitingsheng
committed
8b241be
fix(shields): document legacy-baseline env var, prefix hash failures
laitingsheng
committed
44bd0eb
fix(shields): preserve sensitiveFiles in timer auto-restore lock target
laitingsheng
committed
2647579
fix(shields): align legacy notice + dedupe SHA regex, harden timer test
laitingsheng
committed
7b69236
fix(shields): cover partial seal opt-in, drop e2e EXIT trap clash
laitingsheng
committed
c385270
fix(shields): UNSEALED status exit 2, harden e2e tamper around chattr
laitingsheng
committed
3b2fb47