fix(shields): attest private mutable Hermes topology - #7049

Merged

apurvvkumaria merged 10 commits into

mainfrom

codex/pr7033-mode-rejection

Jul 16, 2026

Commits on Jul 16, 2026

fix(shields): accept private mutable Hermes root
prekshivyas
committed
498d3a0
test(shields): reject loose Hermes root modes

apurvvkumaria
and
prekshivyas
committed
291aa0d
fix(shields): gate private Hermes root by topology
prekshivyas
committed
f0d4ff5
test(shields): cover malformed topology response
prekshivyas
committed
e86c250
test(shields): exercise lifecycle marker probe
prekshivyas
committed
0d88783
Merge remote-tracking branch 'origin/main' into codex/fix-hermes-private-shields-root
prekshivyas
committed
8cf0b51
test(shields): keep marker fixtures linear
prekshivyas
committed
c718c24
fix(shields): attest private Hermes root topology

apurvvkumaria
and
prekshivyas
committed
e20f45c
test(shields): exercise root rollback in container

apurvvkumaria
and
prekshivyas
committed
6c05900
fix(shields): recheck mutable runtime topology

apurvvkumaria
and
prekshivyas
committed
7c5546b