Ethos Aegis · repository artifact

Aegis Brief

Pull request 360 merged at 87b3186. Codex reviewed 8072c6a. This page is the Pages entry document. It does not need an API token.

Open the 4D video board — cells scan a threat, then quarantine, delete, clean, or block it.

Current state

Merged

30 Sep 2026, 01:12 UTC. The remaining diff against main removes .github/dependabot/.yml only.

Codex P1

7

Codex P2

6

Extra gate

1

Review threads

13

What this deployment fixes

The Pages workflow was uploading the repository root, which has no index document. The deploy artifact is now this folder, so the site opens on index.html.

Cell registry JSON · Pull request 360

Defense cell atlas

Proposed design. A favorable model verdict cannot grant a permission.

Smallest safe repair

Written for commit 8072c6a. Merging did not prove these landed.

  1. Restore collection and Windows checkout. Remove the colon in the tracked filename. Strip pasted diff text from python/tests/test_suite.py.
  2. Restrict the publishing credential. Keep NPM_TOKEN on the publish step only.
  3. Repair the authorization boundary. Path-segment globs, secret purpose, original-byte reflection, and a trusted runtime environment instead of a hard-coded sandbox label.
  4. Make the scans real gates. CodeQL must see repl.ts and scripts/**. Bandit and pip-audit must be able to fail the report.

Findings