Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
33 commits
Select commit Hold shift + click to select a range
bfaec2e
chore(core/migration): remove legacy src/ duplicates; convert include…
flyingrobots Sep 13, 2025
2c614d3
fix(tidy/include-cleaner): include exact libgit2 headers; drop unused…
flyingrobots Sep 13, 2025
2fac424
fix(include): guard time conversion macros in constants_internal.h
flyingrobots Sep 13, 2025
b1b70b6
fix(output): add missing EOF newlines for header and CLI impl
flyingrobots Sep 13, 2025
3ba29e0
chore(cli): normalize includes and use CLI include paths; adjust Meso…
flyingrobots Sep 13, 2025
7d05d81
feat(cli): introduce gm_cli_ctx_t and pass explicit output context to…
flyingrobots Sep 13, 2025
48721df
feat(cli): libgit2-based safety guard with strict official-repo match…
flyingrobots Sep 13, 2025
f5fe955
test(core): add URL safety matcher unit test and register in Meson
flyingrobots Sep 13, 2025
d176f61
docs(ops): document environment variables; link from README and docs …
flyingrobots Sep 13, 2025
2de2639
ci(e2e): run E2E inside CI Docker image for compiler/parity and isola…
flyingrobots Sep 13, 2025
79d10ba
fix(core/journal): add temporary CBOR decode wrappers to support CLI …
flyingrobots Sep 13, 2025
285939a
style(include): use angle includes in umbrella header and trim option…
flyingrobots Sep 13, 2025
94c91f1
test(e2e): honor GIT_MIND env, fallback to built paths, improve error…
flyingrobots Sep 13, 2025
f2a71c3
chore(core): clarify time ops comment in context.h
flyingrobots Sep 13, 2025
2841f62
fix(core/journal): address clang-tidy security warnings in reader.c u…
flyingrobots Sep 13, 2025
83abaad
Update .github/workflows/c_core.yml
flyingrobots Sep 14, 2025
a560584
Update .github/workflows/c_core.yml
flyingrobots Sep 14, 2025
df4f3dc
Update apps/cli/cache_rebuild.c
flyingrobots Sep 14, 2025
39ddd32
Update apps/cli/cli_runtime.c
flyingrobots Sep 14, 2025
c06eea7
Update include/gitmind/constants_internal.h
flyingrobots Sep 14, 2025
90c8d29
Update README.md
flyingrobots Sep 14, 2025
0e124d6
chore(repo): checkpoint local changes
flyingrobots Sep 14, 2025
4d28721
Merge remote-tracking branch 'origin/feat/cli-safety-e2e' into feat/c…
flyingrobots Sep 14, 2025
771f28b
chore(pr-166): address CodeRabbit review comments
flyingrobots Sep 14, 2025
613a73c
feat(cli/list): add porcelain output and implement basic filters (sou…
flyingrobots Sep 14, 2025
0b003f7
fix(cli/build): prefer public headers for CLI and include porcelain c…
flyingrobots Sep 14, 2025
c7c3931
chore(docs/lint): add markdownlint with repo style + pre-commit hooks…
flyingrobots Sep 14, 2025
789a40f
ci/docs: add markdownlint to CI and Makefile targets
flyingrobots Sep 14, 2025
1d234c5
docs(legacy): clarify stdout/stderr silence, add sanitizer notes, for…
flyingrobots Sep 14, 2025
2fed63e
docs(review): record rejection for Valgrind suppression link (with co…
flyingrobots Sep 14, 2025
66b46c4
Update docs/PRDs/PRD-co-thought-mcp-service.md
flyingrobots Sep 14, 2025
77b2cd2
ci: fail fast if docker pull fails after retries (avoid implicit pulls)
flyingrobots Sep 14, 2025
3c7c24f
ci(e2e): set GITMIND_SAFETY=off inside container to bypass official-r…
flyingrobots Sep 14, 2025
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion .github/CODE_OF_CONDUCT.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,12 +8,14 @@ We pledge to make participation in our project a harassment-free experience for
## Our Standards

Examples of behavior that contributes to a positive environment:

- Using welcoming and inclusive language
- Being respectful of differing viewpoints
- Gracefully accepting constructive criticism
- Focusing on what is best for the community

Examples of unacceptable behavior:

- Trolling, insulting/derogatory comments
- Public or private harassment
- Publishing others' private information
Expand All @@ -25,4 +27,4 @@ Project maintainers are responsible for clarifying and enforcing standards of ac

## Attribution

This Code of Conduct is adapted from the Contributor Covenant, version 2.0.
This Code of Conduct is adapted from the Contributor Covenant, version 2.0.
59 changes: 38 additions & 21 deletions .github/CONTRIBUTING.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,7 @@ Thank you for your interest in contributing to Neuroglyph! We're building a prot
### Development Setup

1. Fork and clone the repository:

```bash
git clone https://github.com/YOUR_USERNAME/neuroglyph.git
cd neuroglyph
Expand All @@ -26,17 +27,20 @@ Thank you for your interest in contributing to Neuroglyph! We're building a prot
- Ensure Docker is running

3. Install git hooks:

```bash
make install-hooks
```

4. Build the project:

```bash
cd c
make
```

Or use Docker:

```bash
make docker-test
```
Expand All @@ -59,7 +63,7 @@ make test # Run tests
make clean # Clean build artifacts
```

**Important:** The pre-push hook will automatically run `make test` before allowing pushes.
__Important:__ The pre-push hook will automatically run `make test` before allowing pushes.

## 📝 Code Style Guidelines

Expand All @@ -76,6 +80,7 @@ make clean # Clean build artifacts
### Commit Messages

Follow the conventional commits format:

```
type(scope): subject

Expand All @@ -85,6 +90,7 @@ footer (optional)
```

Types:

- `feat`: New feature
- `fix`: Bug fix
- `docs`: Documentation changes
Expand All @@ -94,6 +100,7 @@ Types:
- `chore`: Build process or auxiliary tool changes

Example:

```
feat(cli): add gitmind init command

Expand All @@ -105,20 +112,23 @@ Closes #42

## 🔄 Pull Request Process

1. **Create an issue first** - Discuss the change you wish to make
2. **Fork and create a branch** - Use a descriptive branch name
3. **Make your changes** - Follow the code style guidelines
4. **Add tests** - Ensure your changes are tested
5. **Update documentation** - If you changed behavior, update docs
6. **Run checks locally**:
1. __Create an issue first__ - Discuss the change you wish to make
2. __Fork and create a branch__ - Use a descriptive branch name
3. __Make your changes__ - Follow the code style guidelines
4. __Add tests__ - Ensure your changes are tested
5. __Update documentation__ - If you changed behavior, update docs
6. __Run checks locally__:

```bash
make test # This runs all checks in Docker
```
7. **Submit PR** - Reference the issue and provide clear description

7. __Submit PR__ - Reference the issue and provide clear description

### PR Template

Your PR description should include:

- What problem does this solve?
- How does it solve it?
- What are the key changes?
Expand All @@ -129,14 +139,14 @@ Your PR description should include:

### 🐳 Why All Tests Run in Docker

**Every test MUST run in Docker.** This is not optional. Here's why:
__Every test MUST run in Docker.__ This is not optional. Here's why:

1. **Consistency Across Environments**
1. __Consistency Across Environments__
- No "works on my machine" issues
- Same compiler, same libraries, same behavior
- CI uses Docker, so local tests match exactly

2. **Real Git Operations = Real Danger**
2. __Real Git Operations = Real Danger__
- Our tests create actual Git repositories
- They make real commits, branches, and merges
- Running these on your working directory would be catastrophic:
Expand All @@ -146,25 +156,29 @@ Your PR description should include:
- Would definitely ruin your day

Docker provides isolated, disposable environments where tests can:

- Create and destroy Git repos safely
- Run dangerous edge cases without risk
- Execute Git operations in parallel
- Fail spectacularly without consequences

**Never run tests outside Docker. Your repository will thank you.**
__Never run tests outside Docker. Your repository will thank you.__

### Unit Tests

- Test individual functions in isolation
- Use temporary directories for file operations
- Never touch the actual working repository

### Integration Tests

- Test CLI commands end-to-end
- Create temporary Git repositories in Docker
- Test error cases and edge conditions
- Verify Git operations work correctly

### Example Test (C)

```c
void test_link_creation() {
// Create isolated temp directory
Expand All @@ -186,20 +200,22 @@ void test_link_creation() {
## 🎯 What to Work On

### Good First Issues

Look for issues labeled `good first issue` - these are ideal for newcomers.

### Priority Areas
1. **CLI Commands** - Implementing core functionality
2. **Performance** - Optimizing for large repositories
3. **Documentation** - Improving guides and examples
4. **Testing** - Increasing test coverage
5. **Cross-platform** - Ensuring Windows/macOS/Linux compatibility

1. __CLI Commands__ - Implementing core functionality
2. __Performance__ - Optimizing for large repositories
3. __Documentation__ - Improving guides and examples
4. __Testing__ - Increasing test coverage
5. __Cross-platform__ - Ensuring Windows/macOS/Linux compatibility

## 💬 Communication

- **GitHub Issues** - For bug reports and feature requests
- **GitHub Discussions** - For questions and ideas
- **Pull Request Comments** - For code review discussions
- __GitHub Issues__ - For bug reports and feature requests
- __GitHub Discussions__ - For questions and ideas
- __Pull Request Comments__ - For code review discussions

## 🤝 Code of Conduct

Expand All @@ -212,8 +228,9 @@ By contributing to Neuroglyph, you agree that your contributions will be license
## 🙏 Recognition

Contributors will be recognized in:

- The project README
- Release notes
- Special thanks in documentation

Thank you for helping make Gitmind better! 🐵✨
Thank you for helping make Gitmind better! 🐵✨
10 changes: 6 additions & 4 deletions .github/ETHICAL_USE.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,18 +3,20 @@

This project is released under the MIND-UCAL v1.0 License. However, we respectfully request that users and organizations honor the spirit in which Gitmind was created.

### Gitmind Is For:
### Gitmind Is For

Comment on lines +6 to +7

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick (assertive)

Fix heading level increment (MD001) — use H2 under the H1

Current H3 after H1 violates heading-increment lint. Promote both section headers to H2.

-### Gitmind Is For
+## Gitmind Is For

-### Gitmind Is Not For
+## Gitmind Is Not For

Run markdownlint (or your docs CI) to confirm MD001 is cleared.

Also applies to: 13-14

🧰 Tools
🪛 markdownlint-cli2 (0.17.2)

6-6: Heading levels should only increment by one level at a time
Expected: h2; Actual: h3

(MD001, heading-increment)

🤖 Prompt for AI Agents
.github/ETHICAL_USE.md around lines 6-7 (and also update lines 13-14): current
headings use H3 under an H1 which violates MD001; change the H3 headings
"Gitmind Is For" (lines 6-7) and the other headings at lines 13-14 to H2 (prefix
with "##" instead of "###") so heading levels increment correctly, save the
file, then run markdownlint (or your docs CI) to verify MD001 is cleared.

- Empowering individual thought
- Building transparent knowledge systems
- Open source development and education
- Creative, research, and philosophical exploration

### Gitmind Is Not For:
### Gitmind Is Not For

- Military applications of any kind
- Surveillance systems or behavioral profiling
- Authoritarian infrastructure
- Extractive corporate practices or SaaS enshittification

This is a non-binding but morally binding request to the world: **use this tool to uplift, not to oppress.**
This is a non-binding but morally binding request to the world: __use this tool to uplift, not to oppress.__

_— J. Kirby Ross ("The Gitmind Guy")_
_— J. Kirby Ross ("The Gitmind Guy")_
22 changes: 12 additions & 10 deletions .github/ISSUE_TEMPLATE/bug_report.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,25 +7,27 @@ assignees: ''

---

**Describe the bug**
__Describe the bug__
A clear and concise description of what the bug is.

**To Reproduce**
__To Reproduce__
Steps to reproduce the behavior:

1. Run command '...'
2. Create link '...'
3. See error

**Expected behavior**
__Expected behavior__
A clear and concise description of what you expected to happen.

**Actual behavior**
__Actual behavior__
What actually happened.

**Environment:**
- OS: [e.g. macOS 14.0]
- Gitmind version: [e.g. 0.1.0]
- Git version: [e.g. 2.40.0]
__Environment:__

- OS: [e.g. macOS 14.0]
- Gitmind version: [e.g. 0.1.0]
- Git version: [e.g. 2.40.0]

**Additional context**
Add any other context about the problem here.
__Additional context__
Add any other context about the problem here.
8 changes: 4 additions & 4 deletions .github/ISSUE_TEMPLATE/documentation.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,11 +7,11 @@ assignees: ''

---

**What documentation needs improvement?**
__What documentation needs improvement?__
Describe which part of the documentation is unclear or missing.

**Suggested improvement**
__Suggested improvement__
How would you improve this documentation?

**Additional context**
Any other context that would help.
__Additional context__
Any other context that would help.
10 changes: 5 additions & 5 deletions .github/ISSUE_TEMPLATE/feature_request.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,14 +7,14 @@ assignees: ''

---

**Is your feature request related to a problem? Please describe.**
__Is your feature request related to a problem? Please describe.__
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

**Describe the solution you'd like**
__Describe the solution you'd like__
A clear and concise description of what you want to happen.

**Describe alternatives you've considered**
__Describe alternatives you've considered__
A clear and concise description of any alternative solutions or features you've considered.

**Additional context**
Add any other context or screenshots about the feature request here.
__Additional context__
Add any other context or screenshots about the feature request here.
14 changes: 8 additions & 6 deletions .github/SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,18 +3,19 @@

## 🛡️ Reporting a Vulnerability

If you discover a vulnerability in **Neuroglyph**, we strongly encourage you to report it privately and responsibly.
If you discover a vulnerability in __Neuroglyph__, we strongly encourage you to report it privately and responsibly.

Please email:

**🔒 james@flyingrobots.dev**
__🔒 <james@flyingrobots.dev>__

Comment on lines +6 to 11

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🛠️ Refactor suggestion

⚠️ Potential issue

Strengthen private reporting channels (add GHSA, team alias, and encryption).

Relying on a single personal mailbox is fragile and lacks an encrypted path. Recommend adding GitHub Security Advisories (private), a team alias, and PGP details; also tell reporters not to file public issues.

-If you discover a vulnerability in __Neuroglyph__, we strongly encourage you to report it privately and responsibly.
-
-Please email:
-
-__🔒 <james@flyingrobots.dev>__
+If you discover a vulnerability in __Neuroglyph__, please report it privately and responsibly.
+
+Preferred private channels:
+- GitHub Security Advisories: use the “Report a vulnerability” link on this repository (private).
+- Email: security@neuroglyph.dev (PGP preferred; see Security.txt/PGP key below).
+- Fallback: james@flyingrobots.dev (personal).
+
+Please do not open public issues for security reports.

Outside this file, consider adding:

  • .well-known/security.txt (RFC 9116) with Contact, Encryption, Policy.
  • A published PGP key (link it here).
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
If you discover a vulnerability in __Neuroglyph__, we strongly encourage you to report it privately and responsibly.
Please email:
**🔒 james@flyingrobots.dev**
__🔒 <james@flyingrobots.dev>__
If you discover a vulnerability in __Neuroglyph__, please report it privately and responsibly.
Preferred private channels:
- GitHub Security Advisories: use the “Report a vulnerability” link on this repository (private).
- Email: security@neuroglyph.dev (PGP preferred; see Security.txt/PGP key below).
- Fallback: james@flyingrobots.dev (personal).
Please do not open public issues for security reports.
🤖 Prompt for AI Agents
.github/SECURITY.md lines 6-11: replace the single personal email contact with
guidance to use private reporting channels by adding GitHub Security Advisories
(private) as an official reporting path, a shared team alias (e.g.,
security@yourdomain) instead of a personal mailbox, and instructions for
encrypted submissions including a link to a published PGP key and the PGP
fingerprint; explicitly instruct reporters not to open public issues for
vulnerabilities; additionally, add a note suggesting creation of a
.well-known/security.txt (RFC 9116) on the site containing Contact, Encryption,
and Disclosure Policy entries and link to that file from this document.

Include:

- A clear description of the issue
- Steps to reproduce (if applicable)
- Potential impact or scope

Comment on lines +13 to 17

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🛠️ Refactor suggestion

Ask for actionable report details (versions, env, PoC, impact).

Make triage faster and safer by requesting concrete artifacts and redaction guidance.

-Include:
+Include:
 - A clear description of the issue
 - Steps to reproduce (if applicable)
 - Potential impact or scope
+ - Affected versions/commit SHA and platform (OS, CPU, build flags, Docker image tag)
+ - Minimal PoC (non-destructive) and logs (redacted of secrets/PII)
+ - Workarounds/temporary mitigations if known
+ - Your CVSS v3.x vector/severity (optional)
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- A clear description of the issue
- Steps to reproduce (if applicable)
- Potential impact or scope
- A clear description of the issue
- Steps to reproduce (if applicable)
- Potential impact or scope
- Affected versions/commit SHA and platform (OS, CPU, build flags, Docker image tag)
- Minimal PoC (non-destructive) and logs (redacted of secrets/PII)
- Workarounds/temporary mitigations if known
- Your CVSS v3.x vector/severity (optional)
🤖 Prompt for AI Agents
.github/SECURITY.md around lines 13 to 17 currently lists generic report items;
update it to request actionable, triage-friendly details: ask reporters to
provide affected product and exact versions, environment and configuration,
proof-of-concept or reproduction steps (with test data if safe), expected vs
actual behavior, estimated impact/scope, and explicit redaction guidance for
sensitive data; ensure the wording is concise and includes examples or
placeholders for version strings and environment variables, and instruct
reporters to mark attachments containing secrets so maintainers can handle them
securely.

We aim to respond to all reports within **72 hours**.
We aim to respond to all reports within __72 hours__.

Comment on lines +18 to 19

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🛠️ Refactor suggestion

Define SLA, coordinated disclosure window, and safe‑harbor.

Acknowledge/Triage/Remediate timelines plus legal safe‑harbor reduce ambiguity.

-We aim to respond to all reports within __72 hours__.
+Service levels:
+- Acknowledge within __72 hours__
+- Triage and initial severity within __7 days__
+- Fix/mitigation or advisory within __90 days__ (or as mutually agreed)
+
+Coordinated disclosure: We kindly ask for a confidentiality period up to __90 days__ to prepare a fix and releases.
+
+Safe harbor: We will not pursue or support legal action for good‑faith, non‑destructive testing that respects privacy, data integrity, and applicable law, and that follows the guidance in this policy.
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
We aim to respond to all reports within __72 hours__.
Service levels:
- Acknowledge within __72 hours__
- Triage and initial severity within __7 days__
- Fix/mitigation or advisory within __90 days__ (or as mutually agreed)
Coordinated disclosure: We kindly ask for a confidentiality period up to __90 days__ to prepare a fix and releases.
Safe harbor: We will not pursue or support legal action for good-faith, non-destructive testing that respects privacy, data integrity, and applicable law, and that follows the guidance in this policy.
🤖 Prompt for AI Agents
In .github/SECURITY.md around lines 18 to 19, the policy only states a 72-hour
response target but lacks a defined SLA, coordinated disclosure window, and
legal safe-harbor; update the document to explicitly add (1) an SLA section with
timelines for Acknowledge (e.g., within 72 hours), Triage (e.g., 7 days),
Remediation/Resolution or status updates cadence, (2) a coordinated disclosure
window specifying how long reporters should wait before public disclosure (e.g.,
90 days) and the process for extensions or embargoes, and (3) a
safe‑harbor/legal statement that commits not to pursue legal action against
good-faith security researchers following the disclosure process; ensure
language is concise, actionable, and placed near the existing response-time
sentence.

## 🔐 Supported Versions

Expand All @@ -29,18 +30,19 @@ We currently support security fixes for the following versions:
## 🧪 Scope

This security policy applies to:

- The Neuroglyph CLI (`gitmind`)
- The optional daemon (`glyphd`)
- The Semlink protocol implementation
- Plugins officially maintained in this repository

It does **not** apply to third-party tools, forks, or downstream packages.
It does __not__ apply to third-party tools, forks, or downstream packages.

Comment on lines +33 to 40

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🛠️ Refactor suggestion

Clarify scope and third‑party dependency handling.

Tighten what’s covered and how upstream dependency issues are coordinated.

-This security policy applies to:
+This security policy applies to first‑party code in this repository, including:
 - The Neuroglyph CLI (`gitmind`)
 - The optional daemon (`glyphd`)
 - The Semlink protocol implementation
 - Plugins officially maintained in this repository
-
-It does __not__ apply to third-party tools, forks, or downstream packages.
+ - Build scripts, Dockerfiles/images we publish, and CI/CD workflows that ship artifacts
+
+Out of scope:
+- Forks/downstream packages we do not control
+- Third‑party services and tools
+
+Third‑party dependencies: If a vulnerability is in an upstream dependency, please also report it to the upstream project. If it impacts Neuroglyph via our usage, we will coordinate and ship mitigations/workarounds where feasible.
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
- The Neuroglyph CLI (`gitmind`)
- The optional daemon (`glyphd`)
- The Semlink protocol implementation
- Plugins officially maintained in this repository
It does **not** apply to third-party tools, forks, or downstream packages.
It does __not__ apply to third-party tools, forks, or downstream packages.
This security policy applies to first-party code in this repository, including:
- The Neuroglyph CLI (`gitmind`)
- The optional daemon (`glyphd`)
- The Semlink protocol implementation
- Plugins officially maintained in this repository
- Build scripts, Dockerfiles/images we publish, and CI/CD workflows that ship artifacts
Out of scope:
- Forks/downstream packages we do not control
- Third-party services and tools
Third-party dependencies: If a vulnerability is in an upstream dependency, please also report it to the upstream project. If it impacts Neuroglyph via our usage, we will coordinate and ship mitigations/workarounds where feasible.
🤖 Prompt for AI Agents
In .github/SECURITY.md around lines 33 to 40, the scope language is ambiguous
about third‑party dependencies and coordination with upstream projects; update
the section to (1) explicitly enumerate covered assets (CLI gitmind, optional
daemon glyphd, Semlink protocol implementation, and officially maintained
plugins), (2) state that third‑party tools, forks, downstream packages, and
external dependency packages are out of scope for this policy but may be
affected by vulnerabilities in covered assets, and (3) add a concise process for
handling upstream dependency issues: identify vulnerable dependency versions,
notify upstream maintainers and affected downstreams, provide temporary
mitigation or patch guidance, request CVE coordination when appropriate, and
include contact and expected SLAs for security reports. Ensure wording is
definitive (does not imply coverage of forks) and includes a reference to the
repository’s dependency disclosure and update policy.

## 🧬 Philosophy

We believe semantic knowledge should be **safe**, **auditable**, and **resilient**.
We believe semantic knowledge should be __safe__, __auditable__, and __resilient__.
If Neuroglyph is to become cognitive infrastructure, it must be built on trust.

Comment on lines +43 to 45

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick (assertive)

Nudge philosophy toward concrete security principles.

Add explicit commitments (least privilege, defense‑in‑depth, secure‑by‑default).

-We believe semantic knowledge should be __safe__, __auditable__, and __resilient__.
+We believe semantic knowledge should be __safe__, __auditable__, and __resilient__, guided by secure‑by‑default, least privilege, defense‑in‑depth, and privacy by design.
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
We believe semantic knowledge should be __safe__, __auditable__, and __resilient__.
If Neuroglyph is to become cognitive infrastructure, it must be built on trust.
We believe semantic knowledge should be __safe__, __auditable__, and __resilient__, guided by secure‑by‑default, least privilege, defense‑in‑depth, and privacy by design.
If Neuroglyph is to become cognitive infrastructure, it must be built on trust.
🤖 Prompt for AI Agents
In .github/SECURITY.md around lines 43 to 45, replace or augment the high‑level
statement about safety/auditability/resilience with a concise set of explicit
security commitments: add short, plain‑language bullet points committing to
least privilege (minimal access by default), defense‑in‑depth (multiple layers
of protection), secure‑by‑default configurations, auditable controls and
logging, regular security testing and patching, and a clear responsible
disclosure process; keep each commitment one line and focused so readers can see
concrete principles at a glance.

Thank you for helping us build something worthy of that trust.

— The Neuroglyph Maintainers 🧠
— The Neuroglyph Maintainers 🧠
Loading