Spaces:
Running
Running
fix(holographic): enforce same-origin bounded brain evidence
#6
by betterwithage - opened
Replace browser-side third-party fetches with one same-origin GET evidence contract. Server reads are fixed-allowlist, read-only, timeout/byte bounded, no-store, and never fall back to stale data. Adds complete/partial failure and route regressions. Local: zero-CDN selftest PASS; 9/9 Holographic+Atlas tests PASS.
Merged after 0-CDN selftest, 4/4 evidence contract tests, 5/5 Atlas alignment tests, exact PR artifact hash verification, and a real 8/8-lobe bounded observation. No stale fallback; GET-only route.
betterwithage changed pull request status to merged