Last released Jul 9, 2026
Fail-closed guard against redaction drift: refuses to serve when detection state and serving filter cannot be proven in sync.
Supported by