From 25a83a0e96d28cc84b223063300fb8fef9a24dea Mon Sep 17 00:00:00 2001
From: askalf <263217947+askalf@users.noreply.github.com>
Date: Wed, 5 Aug 2026 14:42:18 -0400
Subject: [PATCH] chore(deps): bump redstamp v0.5.1 -> v0.7.5

Pinned at commit 27c2685 (v0.5.1 era) -- dozens of releases behind,
missing every hardening pass since, most recently a proven bypass of
the deterministic black gate via PowerShell's -ArgumentList array
form ('-ExecutionPolicy','Bypass',...), which scored green while the
equivalent space-separated command correctly scored black
(redstamp#124). This repo's whole pitch is "the call proceeds only
when all three agree" -- redstamp holding a 2-month-old ruleset
undercuts that claim directly.

Same fix propagated today to truecopy, truecopy-action, and platform
(forge + mcp-tools), all pinned at the same stale/older redstamp.

Test plan: full suite 17/17 (includes live "together" tests exercising
truecopy+redstamp+strongroom composed), npm run demo end-to-end clean.

Noted but out of scope here: the sibling @askalf/truecopy (0.8.0) and
@askalf/strongroom pins also look old relative to their current
releases -- worth a follow-up, not bundled into this security fix.
---
 package-lock.json | 8 ++++----
 package.json      | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 57dde1e..3922e02 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9,7 +9,7 @@
       "version": "0.1.0",
       "license": "MIT",
       "dependencies": {
-        "@askalf/redstamp": "git+https://github.com/askalf/redstamp.git#27c26851e175045a3e274042c96760cf52dce9da",
+        "@askalf/redstamp": "git+https://github.com/askalf/redstamp.git#5222bc1b0c1e5dd3daf77078fd964f9c2215fe29",
         "@askalf/strongroom": "git+https://github.com/askalf/strongroom.git#43c9ca600ced5f9acc755590bc324e95764a5195",
         "@askalf/truecopy": "git+https://github.com/askalf/truecopy.git#951460e003ab16ef86ea5f297c6523c09b4fba4e",
         "@modelcontextprotocol/sdk": "^1.30.0",
@@ -23,9 +23,9 @@
       }
     },
     "node_modules/@askalf/redstamp": {
-      "version": "0.5.1",
-      "resolved": "git+ssh://git@github.com/askalf/redstamp.git#27c26851e175045a3e274042c96760cf52dce9da",
-      "integrity": "sha512-wyYu6nB+f7kByRxZrN4ErGoE+nk9IkVCjeMEG7pQQlLjet5Y6x+xQ+5PtoXjZimldtnO5b5/d6RSp/twlJzOow==",
+      "version": "0.7.5",
+      "resolved": "git+ssh://git@github.com/askalf/redstamp.git#5222bc1b0c1e5dd3daf77078fd964f9c2215fe29",
+      "integrity": "sha512-hXwLm1QfQPn6UnKiTNXNTYVLMzhIu+SxiCg/LrLqmsa/xpwlSS4V+GafRf6tV/Kzcvoo+fPGo2Bs8OAOqpcxmA==",
       "license": "MIT",
       "bin": {
         "redstamp": "src/cli.mjs",
diff --git a/package.json b/package.json
index b74c515..f7ef0bd 100644
--- a/package.json
+++ b/package.json
@@ -16,7 +16,7 @@
     "fuzz": "node fuzz/run.mjs"
   },
   "dependencies": {
-    "@askalf/redstamp": "git+https://github.com/askalf/redstamp.git#27c26851e175045a3e274042c96760cf52dce9da",
+    "@askalf/redstamp": "git+https://github.com/askalf/redstamp.git#5222bc1b0c1e5dd3daf77078fd964f9c2215fe29",
     "@askalf/truecopy": "git+https://github.com/askalf/truecopy.git#951460e003ab16ef86ea5f297c6523c09b4fba4e",
     "@askalf/strongroom": "git+https://github.com/askalf/strongroom.git#43c9ca600ced5f9acc755590bc324e95764a5195",
     "@modelcontextprotocol/sdk": "^1.30.0",