{"ruleset":{"id":"queldrex:baseline","version":"2026.07.2"},"corpusSize":100,"runs":5,"variance":0,"consistent":true,"mismatches":[],"history":[{"version":"2026.07.1","summary":"Initial published baseline. Canary tripwire, failed-verification deny, unresolved-risk approval, the lethal-trifecta rule, rug-pull re-review, per-session velocity, the kill switch, customer policy (tighten-only), human feedback, and monitor mode."},{"version":"2026.07.2","summary":"call-args@2 adds artifact-ingestion rules (remote-code loader flags, unsafe deserialization) and credential-shaped egress. Adds the monitor-only observation laws: actor churn, the offline retro-hunt, and server continuity (shapeshifting). No prior verdict is re-judged; these apply going forward."}],"generatedAt":"2026-08-26T10:13:00.275Z"}