-
make verifyis green (ruff format+check, mypy --strict, pytest+coverage) - Tests added/updated; anything touching evidence has a tamper-detection test
- No real tenant data anywhere;
.gitignorestill excludes vaults/packets/keys - Respects the hard rules in
README.md(no server-side PII, no telemetry, no central authority, tamper-evidence mandatory, retaliation threat model) - The verifier (
src/habitable/verify.py) stays independent of vault/sync - Conventional Commit title; commits signed off (
git commit -s, DCO) - Noted any change to the threat model, packet format, or verification protocol
(these are versioned), with a
CHANGELOG.mdentry