From eefe1dae7c1ce5af69340f0f7bb611fd58b58633 Mon Sep 17 00:00:00 2001
From: HiddenTrojan <93521146+Labeeb2339@users.noreply.github.com>
Date: Wed, 22 Jul 2026 17:55:50 +0800
Subject: [PATCH 1/2] docs: write README in maintainer voice

---
 README.md | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index c1fb4de..8c513cd 100644
--- a/README.md
+++ b/README.md
@@ -8,11 +8,11 @@
 
 ![SFTGuard confirmatory dashboard](docs/assets/sftguard-confirmatory-dashboard.png)
 
-SFTGuard catches a narrow set of expensive-to-discover pipeline mistakes before
-an adapter is released: malformed chat records, conflicting or leaked examples,
-credential-shaped text, broken EOS handling, prompt tokens included in loss, and
-answer-destroying truncation. It then gates paired base-versus-adapter scores
-against explicit target and retention budgets.
+I built SFTGuard to catch a narrow set of expensive-to-discover pipeline
+mistakes before an adapter is released: malformed chat records, conflicting or
+leaked examples, credential-shaped text, broken EOS handling, prompt tokens
+included in loss, and answer-destroying truncation. It then gates paired
+base-versus-adapter scores against explicit target and retention budgets.
 
 It runs locally, emits content-addressed JSON, and returns `PASS`, `FAIL`, or
 `ABSTAIN`. Missing evidence never becomes a silent pass.

From f9e34fe16eddba4b97099d0244fd0e6096c7a9ef Mon Sep 17 00:00:00 2001
From: HiddenTrojan <93521146+Labeeb2339@users.noreply.github.com>
Date: Wed, 22 Jul 2026 18:06:04 +0800
Subject: [PATCH 2/2] ci: run required audits on every pull request

---
 .github/workflows/dependency-audit.yml | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/.github/workflows/dependency-audit.yml b/.github/workflows/dependency-audit.yml
index 5d23b43..4cdf920 100644
--- a/.github/workflows/dependency-audit.yml
+++ b/.github/workflows/dependency-audit.yml
@@ -3,17 +3,7 @@ name: Dependency audit
 on:
   push:
     branches: [main]
-    paths:
-      - pyproject.toml
-      - web/package.json
-      - web/package-lock.json
-      - .github/workflows/dependency-audit.yml
   pull_request:
-    paths:
-      - pyproject.toml
-      - web/package.json
-      - web/package-lock.json
-      - .github/workflows/dependency-audit.yml
   schedule:
     - cron: "19 3 * * 1"
   workflow_dispatch: