Anti-AI-decompilation hardening — complete slate (cohort + runtime link + off-device secret + oracle/impurity/per-unit-salt) - #5

Open

owengregson wants to merge 13 commits into

mainfrom

anti-ai-hardening

Commits on Jun 30, 2026

docs: anti-AI-decompilation hardening design spec

owengregson
and
claude
committed
5badb6d
docs: anti-AI hardening implementation plan (W0-W5)

owengregson
and
claude
committed
3238e2d
feat(cli): strip source maps in directory mode (cleartext-leak gate)

owengregson
and
claude
committed
ec54a97
feat(cohort): obfuscateBundle + cross-file Layer-1 key-anchor tangle

owengregson
and
claude
committed
896e243
feat(external-key): externalKeyBinding — off-device necessary secret

owengregson
and
claude
committed
2e9d122
feat(oracle): hole-tolerant slow-path dispatch (kill undefined-opcode tell)

owengregson
and
claude
committed
e72ccdc
docs: record anti-AI hardening layers in CLAUDE.md + spec status

owengregson
and
claude
committed
62d7e03
feat(link): opt-in cross-file runtime co-residence link (W4-L2)

owengregson
and
claude
committed
45b7fa3
feat(per-unit-salt): distinct key per unit (W2 — close same-metadata key reuse)

owengregson
and
claude
committed
85e19ea
feat(impurity): chained decode keystream behind mandatory build gate (W3)

owengregson
and
claude
committed
2a953e3
docs: record W2/W3/W4-L2 as shipped (all anti-AI workstreams complete)

owengregson
and
claude
committed
ad58b09

Commits on Jul 1, 2026

fix(cli,external-key): apply PR #5 review feedback + strict-link provider guard

owengregson
and
claude
committed
1cb2333
docs: add gen-2 anti-AI hardening handoff prompt

owengregson
and
claude
committed
30f4563