Surfaced via a conclave council run (synthesize + adversarial passes), 2026-06-07.
Council verdict: CUT this cycle (revisitable). Not off-mission in principle, but introduces a new trust model (who curates "known-good"?), a new attack surface (registry poisoning), and L effort — all before the core integrity primitives are proven. npm/PyPI built registries after their hash/signing primitives were stable; follow the same sequence.
Revisit when: signing (#16), provenance (#19), and the schema-diff engine (#15) are stable.
Status: parked backlog — read-only-by-default client if/when built. Labeled wontfix for this cycle, not permanently.
Surfaced via a conclave council run (synthesize + adversarial passes), 2026-06-07.
Council verdict: CUT this cycle (revisitable). Not off-mission in principle, but introduces a new trust model (who curates "known-good"?), a new attack surface (registry poisoning), and L effort — all before the core integrity primitives are proven. npm/PyPI built registries after their hash/signing primitives were stable; follow the same sequence.
Revisit when: signing (#16), provenance (#19), and the schema-diff engine (#15) are stable.
Status: parked backlog — read-only-by-default client if/when built. Labeled
wontfixfor this cycle, not permanently.