demo: planted auth_bypass for nose detector#10

Open

fentonbenjamin wants to merge 8 commits into

mainfrom

demo/auth-bypass-trigger

Commits on May 20, 2026

demo: add admin route with X-Internal-Trust header bypass (planted bug for nose demo)
claude
committed
retrigger: webhook with Rust-kernel-in-container build
fentonbenjamin
committed
retrigger: third try with JSON-admin-grant pattern
fentonbenjamin
committed
retrigger: webhook with diff_excerpt in candidate
fentonbenjamin
committed
demo: plant X-Internal-Trust bypass in existing shape route (modify, not add)
fentonbenjamin
committed
demo: plant trust_label_leak — verified ✓ rendered on entry_hash alone
fentonbenjamin
committed
retrigger: trust_label_leak with comment + decl filters
fentonbenjamin
committed
retrigger: webhook against binary-attestation strict mode
fentonbenjamin
committed