deploy: source-bound IMMUNE 4965da809692

deploy: source-bound IMMUNE 644b4a7ba41e

deploy: source-bound IMMUNE b728c7f70e55

deploy: source-bound IMMUNE be137132c9c5

deploy: source-bound IMMUNE 45046db1a388

deploy: source-bound IMMUNE 9d1a5643ec11

deploy: source-bound IMMUNE e866af3f1a7d

deploy: source-bound IMMUNE b98c4af1b0b6

Add measured source attestation route (#1)

Wave1: add interoperable in-toto/SLSA DSSE attestation frontier (attest routes + AttestationPanel); rev g-attest

IMMUNE frontier: RFC 6962 append-only (consistency) proofs, browser-verified

IMMUNE frontier: RFC 6962 Merkle inclusion proofs (/anchor/tree, /anchor/proof/:seq) + in-browser verifier; rev 2026-07-08e-merkle

External witnessing: anchor ledger root into public Sigstore Rekor log (rev 2026-07-08d-anchor)

Reseed pristine 6-entry chain (remove local-test signed receipts); live agent + T05 + Ed25519

Upgrade: live governed agent (Groq) + real egress T05 gate + Ed25519 signing

Deepen IMMUNE: CISA KEV live feed + expanded ecosystem feeds + Governance Pipeline panel

Enrich Foundations: real szl-holdings corpus math + honesty guard (10 cards, PROVEN/CONJECTURE/METHOD)

IMMUNE frontier: live governed agent (SZL inference) + Ed25519 receipt signing

IMMUNE frontier: live governed agent (SZL inference) + Ed25519 receipt signing

Visual polish: additive CSS/motion/a11y/meta only; all visible copy frozen (text-diff verified). No JS/server.py/Dockerfile/.github/.compliance changes.

fix(doctrine): scrub user-visible codename SENTRA -> GATE in served dist/public/index.html SEO meta tags (description/og/twitter). The rendered UI bundle already uses GATE; only the static index.html meta lagged. No codename in served HTML/prose. Additive text-only; receipt chain + API untouched.

Doctrine: rename SENTRA codename -> GATE/admission-gate in rendered UI (button, badge, watcher) + mode-ID; internal data fields & ledger payload field preserved (hash chain intact)

immune: remove runtime CDN (self-host fonts) + honest title/description

Deploy IMMUNE investor demo: real SHA-256 receipt chain + live Rekor/ATLAS/OWASP intel (doctrine v11, honest provenance)