S2 slice 1: apply-input gate (validate + hash binding + source guards) - #287

Merged

PhysShell merged 2 commits into

mainfrom

claude/s2-rewriter-inputs

Jul 16, 2026

Commits on Jul 16, 2026

feat(S2-1): apply-input gate — validate + candidates↔plan hash binding + source guards

PhysShell
and
claude
committed
1c577d7
fix(S2-1): canonically bind plan envelope, carry+require full identity, normalize read OSError

PhysShell
and
claude
committed
ed575e0