gstack/cso
Garry Tan 12ab68dda0
feat: carve cso into skeleton + on-demand section (security-safe)
Scope-dependent audit Phases 2-11 move to sections/audit-phases.md. Mode
dispatch (## Arguments, ## Mode Resolution), always-run Phases 0/1, and the
Phase 12 false-positive-filtering exceptions stay ALWAYS-LOADED in the
skeleton. Skeleton 79,383 -> 65,117 B (-18%); union preserved.

Adds a cso CARVE_GUARDS entry with an earliest-use invariant (mustPrecedeStop):
mode dispatch must appear before any STOP-Read, so a directive that decides
which sections to read can't be stranded behind the STOP that reads them
(codex outside-voice #6). carve-guard-checks gains the mustPrecedeStop check.
parity moves cso monolith -> generated carved entry. cso-preserved.test.ts
strengthened: phrases checked against the union, plus an always-loaded
contract on the skeleton (dispatch + FP-filtering, codex #5).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-07 17:57:50 -07:00
..
sections feat: carve cso into skeleton + on-demand section (security-safe) 2026-06-07 17:57:50 -07:00
ACKNOWLEDGEMENTS.md feat: /cso v2 — infrastructure-first security audit (v0.11.6.0) (#384) 2026-03-23 06:57:22 -07:00
SKILL.md feat: carve cso into skeleton + on-demand section (security-safe) 2026-06-07 17:57:50 -07:00
SKILL.md.tmpl feat: carve cso into skeleton + on-demand section (security-safe) 2026-06-07 17:57:50 -07:00