CHANGELOG.md
CONTRIBUTING.md
LICENSE
MANIFEST.in
README.md
SECURITY.md
pyproject.toml
conformance/README.md
conformance/manifest.json
conformance/canonicalization/defaults-normalize-away.json
conformance/canonicalization/key-order-is-irrelevant.json
conformance/canonicalization/metadata-does-not-affect-the-hash.json
conformance/canonicalization/numeric-spelling-is-irrelevant.json
conformance/canonicalization/owns-sugar-equals-its-expansion.json
conformance/canonicalization/requires-does-not-affect-the-hash.json
conformance/canonicalization/yaml-and-json-agree.json
conformance/decisions/arg-above-maximum-denies.json
conformance/decisions/binding-overrides-a-spoofed-argument.json
conformance/decisions/binding-without-the-attribute-denies.json
conformance/decisions/canary-in-an-argument-denies.json
conformance/decisions/checksum-secret-in-an-argument-denies.json
conformance/decisions/confirmation-required.json
conformance/decisions/constraint-without-resolver-denies.json
conformance/decisions/cross-tenant-resource-denies.json
conformance/decisions/escalate-collapses-before-confirmation.json
conformance/decisions/escalate-does-not-mask-a-deterministic-denial.json
conformance/decisions/escalate-without-a-tier-denies.json
conformance/decisions/inherited-grant-allows.json
conformance/decisions/no-arg-schema-denies.json
conformance/decisions/no-principal-denies.json
conformance/decisions/rbac-grant-allows.json
conformance/decisions/rbac-ungranted-role-denies.json
conformance/decisions/undeclared-arg-denies.json
conformance/decisions/unknown-tool-denies.json
conformance/invalid-policy/binding-from-an-argument.json
conformance/invalid-policy/binding-with-an-expression.json
conformance/invalid-policy/grant-as-an-object.json
conformance/invalid-policy/pattern-adjacent-overlapping-repeats.json
conformance/invalid-policy/pattern-alternation-in-a-repeat.json
conformance/invalid-policy/pattern-delimited-line-every-delimiter-free.json
conformance/invalid-policy/pattern-finite-outer-bound-over-a-repeat.json
conformance/invalid-policy/pattern-nested-repeat.json
conformance/invalid-policy/tools-as-a-list.json
conformance/invalid-policy/unknown-bundle-section.json
conformance/invalid-policy/unknown-field-key-typo.json
conformance/invalid-policy/unknown-resource-key.json
conformance/invalid-policy/unknown-role-key.json
conformance/invalid-policy/unknown-tool-key.json
conformance/invalid-policy/unsupported-feature.json
conformance/invalid-policy/unsupported-schema-version.json
conformance/projection/absent-description-is-not-an-empty-one.json
conformance/projection/argument-surface-is-closed-by-default.json
conformance/projection/draft4-boolean-exclusive-minimum-is-ignored.json
conformance/projection/every-projected-keyword-survives.json
conformance/projection/integral-bounds-hash-the-same-whether-written-as-int-or-float.json
conformance/projection/integral-bounds-written-as-int.json
conformance/projection/nullable-type-list-is-optional.json
conformance/projection/openai-function-projects-like-mcp.json
conformance/projection/unprojected-keywords-do-not-move-the-contract-hash.json
docs/README.md
docs/design.md
docs/identity.md
docs/open-core-boundary.md
docs/policy-format-draft-0.1.md
docs/policy-reference.md
docs/releasing.md
docs/roadmap.md
docs/tech-debt.md
docs/tool-contracts.md
examples/import_review_protect.py
examples/makeRefund_demo.py
examples/quickstart.py
examples/security.policy.yaml
policies/01-minimal.policy.json
policies/01-minimal.policy.yaml
policies/02-tenant-isolation.policy.json
policies/02-tenant-isolation.policy.yaml
policies/03-rag-readonly.policy.json
policies/03-rag-readonly.policy.yaml
policies/04-refund-approval.policy.json
policies/04-refund-approval.policy.yaml
policies/05-mcp-surface.policy.json
policies/05-mcp-surface.policy.yaml
policies/06-outbound-email.policy.json
policies/06-outbound-email.policy.yaml
policies/07-devops-deploy.policy.json
policies/07-devops-deploy.policy.yaml
policies/README.md
spec/decision-codes.json
spec/json-schema-projection-0.1.md
spec/policy-0.1.schema.json
spec/tool-lock-0.1.schema.json
src/histos/__init__.py
src/histos/_bounds.py
src/histos/_version.py
src/histos/cli.py
src/histos/display.py
src/histos/errors.py
src/histos/py.typed
src/histos/review.py
src/histos/decide/__init__.py
src/histos/decide/budget.py
src/histos/decide/canary.py
src/histos/decide/content_rules.py
src/histos/decide/detectors.py
src/histos/decide/engine.py
src/histos/decide/excchain.py
src/histos/decide/limits.py
src/histos/decide/patterns.py
src/histos/decide/postgate.py
src/histos/decide/redaction.py
src/histos/format/__init__.py
src/histos/format/bundle.py
src/histos/format/bundledump.py
src/histos/format/bundlekeys.py
src/histos/format/bundleparse.py
src/histos/format/bundleread.py
src/histos/importers/__init__.py
src/histos/importers/js_refs.py
src/histos/importers/js_unions.py
src/histos/importers/js_vocab.py
src/histos/importers/json_schema.py
src/histos/importers/mcp.py
src/histos/importers/openai.py
src/histos/importers/openapi.py
src/histos/importers/sources.py
src/histos/integrations/__init__.py
src/histos/integrations/base.py
src/histos/integrations/langchain.py
src/histos/integrations/langgraph.py
src/histos/mediate/__init__.py
src/histos/mediate/approvals.py
src/histos/mediate/binding.py
src/histos/mediate/callctx.py
src/histos/mediate/callsig.py
src/histos/mediate/coverage.py
src/histos/mediate/gate.py
src/histos/mediate/identity.py
src/histos/mediate/inspection.py
src/histos/mediate/policyref.py
src/histos/mediate/protection.py
src/histos/mediate/recorder.py
src/histos/mediate/toolref.py
src/histos/mediate/wrappers.py
src/histos/policy/__init__.py
src/histos/policy/authz.py
src/histos/policy/canonical.py
src/histos/policy/contracts.py
src/histos/policy/fingerprint.py
src/histos/policy/frozen.py
src/histos/policy/schema.py
src/histos/policy/validation.py
src/histos/provenance/__init__.py
src/histos/provenance/infer.py
src/histos/provenance/lockdiff.py
src/histos/provenance/lockfile.py
src/histos/redos/__init__.py
src/histos/redos/alphabet.py
src/histos/redos/probe.py
src/histos/redos/shapes.py
src/histos/trail/__init__.py
src/histos/trail/audit.py
src/histos/trail/auditrecord.py
src/histos/trail/jsonlsink.py
src/histos/trail/logpath.py
src/histos/trail/verify.py