Architecture
- Pure standard-library modules separate strict loading, normalized data, deterministic findings/state, rendering, atomic publication, sample creation, and CLI handling.
- Duplicate-key rejecting closed JSON, exact CSV headers, safe relative paths, regular-file/link checks, UTF-8/LF checks, bounded counts/sizes, content leakage canaries, and exact literal source anchors form the trust boundary.
- The combined digest binds six approval-neutral controls, all declared source bytes, and eight fixed approval-neutral release-candidate artifacts by safe path, size, and SHA-256. Fixed pending fields make the rule acyclic. Approval, receipt, and final index are bound separately under documented exclusions.
- All 11 outputs are rendered from one normalized result. Non-approved Markdown is visibly bannered; non-approved JSON is nondeployable. The final index hashes the other ten outputs, while independent validation ignores claimed index truth and re-renders exact expected bytes.
- Inspection and approval use sibling staging, independent byte checks, input resnapshots, atomic replacement, and rollback so failures preserve prior final bytes.
Trimmed scope
No extraction, OCR, model call, semantic matching, conflict resolution, price calculation, platform adapter, customer action, browser, OAuth, MCP, API, webhook, server, database, authentication, signatures, billing, UI, multi-location inheritance, scheduler, notification, or telemetry was built. The tool does not deploy. The first engagement remains a manual declaration and owner-resolution service.
Limitations
The tool checks supplied-file structure, declared rules, literal anchors, and exact byte identity only. Human authorization, sanitation, reviewer IDs, roles, and timestamps remain declarations. Approval is not identity authentication or deployment. No source-truth, compliance, safety, privacy, security, accessibility, accuracy, downstream vendor, or outcome guarantee is made. Secret and canary checks are conservative heuristics, not proof that a workspace is safe.