The guard loop
get-started / v1
- Wrap
- Inspect
- Frozen-mode decision: ok / repaired / degraded / bypassed / blocked
- Audit artifact
- Optional feedback
Wrap → inspect → decision → audit → feedback
Wrap the callable. Inspect bounded complete request and response evidence. Freeze the mode for both phases. Produce ok / repaired / degraded / bypassed / blocked. Export an audit artifact through an explicitly configured sink. Optional feedback informs later investigation; it cannot authorize replay or change a completed decision.
Evidence classes
A finding describes drift evidence. A patch describes a proposed or verified selective change. An incident is a separately admitted accounting unit. A candidate is not an applied repair; an audit artifact is not automatically write-integrity proof. Incomplete captures are unavailable evidence, not malformed vendor bodies.
Byte identity
No-repair paths preserve original payload identity. Selective repair changes only verified drifted fields and records byte_identical: false. Numeric coercion is not a repair. The default guest supplies no selective repair output.
Specification
Read the governing contract and the related guide.