feat: sprint4 security/runtime hardening and E2E coverage#13

Merged

simonhagger merged 12 commits intomainfrom

feat/sprint4-hardening-closeout

Feb 15, 2026

Commits on Feb 15, 2026

chore(governance): capture external review backlog and ignore claude temp files
simonhagger
committed
feat(security): centralize ingress rejection logging and settings import policy
simonhagger
committed
ci(runtime): enforce python runtime prep/assert in windows packaging
simonhagger
committed
docs(backlog): add external provider trust-tier architecture items
simonhagger
committed
test(ipc): close BL-032 handler-failure integration assertions
simonhagger
committed
test(e2e): expand UI smoke coverage and close sprint status
simonhagger
committed
docs(pr): refresh draft template for sprint4 closeout
simonhagger
committed
fix(ci): make docs-lint resilient without ripgrep
simonhagger
committed