3 commits

Author	SHA1	Message	Date
allaunthefox	eba0528728	fix: resolve h11 CVE-2025-43859 (critical) ... - Pin h11>=0.16.0 in requirements.txt (fixes malformed Chunked-Encoding) - Remove h11 from dependabot ignore list so it tracks future updates CVE-2025-43859: h11 accepted some malformed Chunked-Encoding bodies. Fixed in h11 0.16.0. Added as explicit dependency to ensure safe version.	2026-07-01 20:01:41 +00:00
allaun	634fc760ba	fix: Dependabot config — ignore transitive Cargo/npm deps, suppress alerts	2026-06-30 06:59:48 -05:00
allaun	e6d5a0a8d4	feat: README, CI pipeline, Dependabot config ... - README.md: project overview, quick start, verification commands - GitHub Actions: anti-smuggle entry gate runs on push (4 layers) - Dependabot: ignore transitive dependencies (h11, opentelemetry, etc.) - predictions JSON committed to data/ for CI reproducibility - build_pist_matrices_250.py / build_manifold.py now default to data/	2026-06-30 05:48:50 -05:00