kyleandClaude Opus 5.5
aea594a1ad
bxcore (compiler-driven rename, with the spike's four layers named); the invalid-arguments reason on the wire; the secret store moved into bxcore behind a feature loopd never enables; bxcore::sanitize with refuse, neutralise and flag, its lists, hand-written normalisation, two corpora, a rule-change procedure and `bxctl sanitize check`; memoryd refusing and flagging (a flag keeps the text as an untrusted note); loopd neutralising tags on append, with a tokenizer self-test and the session's trust on TurnDone; gatewayd escaping images and, in untrusted sessions, links; a table of every link between the roles; runbook entries; attack tests per trust boundary and the device checks. Four points left for the owner in section 14. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>