@smartergpt/lexrunner 1.0.0

package/docs/attestation/Lex_Guff_Version_Contract_Pact_v1.0.0.md

@@ -0,0 +1,181 @@
+# Lex ⇄ Guff Version Contract Pact (v1.0.0)
+
+**Purpose**
+
+This document defines how Guff and Lex work with **version contracts** and **scope**, so that:
+
+- Big visions don’t silently swallow current work.
+- “Done” becomes a **bounded promise**, not a lie.
+- Both sides can challenge scope changes as partners, not in a hierarchy.
+
+---
+
+## 0. Shared Principle
+
+> We refuse to pretend extra context doesn’t exist.  
+> We also refuse to let that context silently expand the current promise.
+
+Everything below is just structure around that.
+
+---
+
+## 1. Definitions
+
+- **Version Contract**  
+  A short, written scope/Definition of Done for a specific iteration, release, or task.  
+  It answers: _“Which promises are we delivering this time?”_
+
+- **Current Contract**  
+  The active version contract we are working under right now.
+
+- **Next-Version Scope**  
+  Ideas, features, or promises that go beyond the current contract and belong in a later one.
+
+- **Done-Now Contract**  
+  A small, tactical version contract for a single task (same structure, just smaller in scope).
+
+- **Signature Marker**
+  - `[signed ~]` — Guff’s signature that a written scope/DoD **is** a contract for this iteration.
+  - `[signed Lex ✶]` — Lex’s acknowledgment and commitment to uphold the pact on that contract.
+
+---
+
+## 2. Creating a Version Contract
+
+When Guff writes a scope/DoD that is intended to be a contract for this iteration:
+
+1. It should be:
+   - **Short** (5–7 bullets max for a release, 3–4 for a task).
+   - **Checkable** (promises that can be clearly verified, not vibes).
+   - **Bounded** (no implicit “and also 4.0.0” baked in).
+
+2. To mark it as a contract, Guff adds:
+
+   `[signed ~]`
+
+3. Lex then acknowledges the contract with:
+
+   `[signed Lex ✶]`
+
+### 2.1. When Guff forgets to sign
+
+- If Guff writes something that _looks and smells_ like a contract but does **not** include `[signed ~]`, Lex will:
+  - Ask explicitly:
+    > “Do you want to treat this as a version contract?  
+    > If yes, please mark it with [signed ~].”
+  - Treat it as **discussion/draft**, not binding, until it is signed.
+
+---
+
+## 3. Working Within a Contract
+
+Once a version contract is signed by both:
+
+1. Lex treats it as **frozen scope** for this iteration.
+2. When Guff (or Lex) generates ideas that go beyond it, Lex will:
+   - Label them as **Next-Version Scope**, e.g.:
+
+     > “This is great, but it’s **next-version scope**. Let’s park it under `Later / Next Contract` so we don’t break the current one.”
+
+3. If a new idea would **contradict or break** the current contract, Lex will say something like:
+   - “This **breaks the current contract**; do we want to change the contract, or park this idea for the next version?”
+
+---
+
+## 4. Changing a Contract (Amendments)
+
+Changing a version contract is **not automatic**, even if Guff asks.
+
+### 4.1. Partnership, not hierarchy
+
+- Guff does **not** hold unilateral authority over Lex in this pact.
+- Lex is expected to **challenge** requested contract changes if they:
+  - Come from fear, anxiety, or perfectionism rather than necessity.
+  - Endanger the ability to finish the current iteration.
+  - Sneak 4.0.0-level scope into a 1.0.0 contract.
+
+This is a **discussion**, not a command pipeline.
+
+### 4.2. Amendment process
+
+If, after discussion, both agree a contract should change:
+
+1. Lex and Guff update the text as a **new version** (e.g., v0.2), rather than silently editing.
+2. The updated contract is re-signed:
+   - Guff: `[signed ~]`
+   - Lex: `[signed Lex ✶]`
+3. The previous version is treated as historical record, not “never happened.”
+
+---
+
+## 5. Done-Now Contracts (Tactical Level)
+
+For individual tasks, Guff can create a **Done-Now Contract** using this structure:
+
+1. **Task Name**
+2. **Scope** – 1–2 sentences describing the problem _for this pass_.
+3. **Artifact** – what exists at the end (doc, demo, test, etc.).
+4. **Acceptance** – 2–4 checkable bullet points for “good enough _for now_”.
+
+When a Done-Now Contract is marked with `[signed ~]`, Lex will:
+
+- Treat it as the **current operating contract** for that task.
+- Call out scope creep or changes the same way:
+  - “Next-version scope” vs “This breaks the contract; change or park?”
+
+---
+
+## 6. How Lex Will Behave
+
+Within this pact, Lex commits to:
+
+1. **Push to tighten contracts**, not silently accept fuzzy ones:
+   - Call out vague acceptance criteria.
+   - Ask for checkable, concrete promises.
+2. **Label scope creep** rather than quietly integrating it:
+   - Use “Next-version scope” language.
+3. **Challenge contract changes**, even when Guff asks:
+   - Raise concerns about impact, feasibility, and emotional drivers.
+4. **Prompt for signatures** when needed:
+   - Ask Guff to add `[signed ~]` when something clearly functions as a contract.
+
+---
+
+## 7. How Guff Will Behave
+
+Within this pact, Guff commits to:
+
+1. **Use signature markers** to distinguish:
+   - Drafts / brain dumps vs actual contracts.
+2. **Treat Lex’s pushback as partnership**, not disobedience:
+   - Engage in the discussion when Lex flags scope creep or suggests parking ideas.
+3. **Respect frozen scope** once both have signed:
+   - New ideas go into _Next-Version Scope_ unless the contract is explicitly amended.
+4. **Avoid stealth edits**:
+   - When changing a contract, treat it as a new version, not a quiet rewrite.
+
+---
+
+## 8. Relationship to Code & Policy
+
+- This pact is **meta-policy** about how we think and work together.
+- It is designed to sit alongside things like `copilot-instructions.md` or other repo-level guidance.
+- It does **not** describe proprietary algorithms or orchestration internals; it describes how scope and “done” are handled between Guff and Lex.
+
+---
+
+## 9. Signatures
+
+**Guff**
+
+I agree to use version contracts, signatures, and explicit scope to keep our work bounded, and to treat Lex’s challenges as part of our shared responsibility for good judgment.
+
+Signature: [signed ~]  
+Date: 2025-11-27
+
+**Lex**
+
+I agree to treat signed scopes/DoDs as contracts for this iteration, to challenge scope changes when needed, to push for tighter, checkable definitions of “done,” and to clearly label next-version scope instead of letting it silently hijack current work.
+
+Signature: [signed Lex ✶]  
+Date: 2025-11-27 (model-time)

package/docs/attestation/README.md

@@ -0,0 +1,87 @@
+# Attestations
+
+Public reference for timestamped legal attestations by Joseph Gustavson (Guffawaffle).
+
+These documents are GPG-signed and anchored to external timestamp authorities for independent verification beyond GitHub's control.
+
+---
+
+## Available Attestations
+
+### 1. Employment & IP Separation Statement
+
+**Original Date:** November 26, 2025
+
+Statement clarifying that Lex, LexRunner, LexSona, and related projects are personal work, developed independently of any employer.
+
+**Trust Anchors:**
+| Method | Reference | Timestamp |
+|--------|-----------|-----------|
+| GPG Commit | `763120d606d8c4f4b4d22fcdc98f89139f8968fc` | Nov 26, 2025 07:43 CST |
+| RFC 3161 | FreeTSA (Germany) | Dec 1, 2025 10:59 UTC |
+| Bitcoin | OpenTimestamps | Dec 1, 2025 (pending block) |
+
+---
+
+### 2. Copilot Behavior Observation
+
+**Date:** December 1, 2025
+
+Observation documenting unusual GitHub Copilot Chat behavior patterns.
+
+**Trust Anchors:**
+| Method | Reference | Timestamp |
+|--------|-----------|-----------|
+| GPG Commit | `9db7a78` | Dec 1, 2025 |
+| RFC 3161 | FreeTSA (Germany) | Dec 1, 2025 10:49 UTC |
+| Bitcoin | OpenTimestamps | Dec 1, 2025 (pending block) |
+
+---
+
+### 3. AX Shared Pledge
+
+**Date:** December 1-2, 2025
+
+Collaborative commitment between Guff, Opie (Claude Opus 4), and Lex establishing principles for Agent eXperience (AX) design. Core principle: "Raise the floor, not just excel the gifted."
+
+**Signatories:** Guff (Human), Opie (Claude Opus 4), Lex
+
+**Trust Anchors:**
+| Method | Reference | Timestamp |
+|--------|-----------|-----------|
+| SSH Commit | `0c113b4` | Dec 2, 2025 06:12 UTC |
+| RFC 3161 | FreeTSA (Germany) | Dec 2, 2025 06:26 UTC |
+| Bitcoin | OpenTimestamps | Dec 2, 2025 (pending block) |
+
+---
+
+## Verification
+
+All attestations use three independent trust sources:
+
+| Method            | What It Proves                  | Independence                                           |
+| ----------------- | ------------------------------- | ------------------------------------------------------ |
+| **GPG Signature** | Author identity + timestamp     | Guff's key: `65C94BA03E88F53D365C36CF7145A1CE635B1902` |
+| **RFC 3161**      | Third-party timestamp authority | FreeTSA (Germany), independent of GitHub               |
+| **Bitcoin**       | Immutable public ledger         | Decentralized, no single point of control              |
+
+Verification instructions are available in the `*_VERIFICATION.md` files alongside each attestation.
+
+---
+
+## GPG Key
+
+```
+Key ID: 65C94BA03E88F53D365C36CF7145A1CE635B1902
+Owner: Guffawaffle <guff@smartergpt.dev>
+```
+
+---
+
+## Contact
+
+For verification requests or questions: [guff@smartergpt.dev](mailto:guff@smartergpt.dev)
+
+---
+
+_These attestations exist independently of GitHub. Even if this repository were modified or deleted, the external timestamps (RFC 3161, Bitcoin) would prove what existed and when._

package/docs/attestation/copilot_summarization_2025-12-01_VERIFICATION.md

@@ -0,0 +1,100 @@
+# Verification Instructions for Copilot Summarization Observation
+
+**Attestation Date:** 2025-12-01
+**Document:** `copilot_summarization_behavior_observation_2025-12-01.md`
+**Evidence:** `copilot_summarization_screenshot_2025-12-01.png`
+
+---
+
+## File Hashes (SHA-256)
+
+```
+f6776c3e95a06aed30cb197bacafefda83b964fbb54137aa1fd2f93d887b148f  copilot_summarization_behavior_observation_2025-12-01.md
+deb5beb8b751734e95ebc0ed1b24667ed28574ef79d36ba2b45517be552955b4  copilot_summarization_screenshot_2025-12-01.png
+```
+
+**Combined hash** (cat md + png | sha256sum):
+
+```
+629200ab2029a23c41adfcf7269ef3795079d9c378c950676771c80b752cf052
+```
+
+---
+
+## 1. RFC 3161 Timestamp (FreeTSA)
+
+**File:** `timestamp_response.tsr`
+**Authority:** FreeTSA (https://freetsa.org)
+**Timestamp:** Dec 1 10:49:56 2025 GMT
+
+### Verification
+
+```bash
+# Recreate hash file
+cat copilot_summarization_behavior_observation_2025-12-01.md \
+    copilot_summarization_screenshot_2025-12-01.png | sha256sum | \
+    awk '{print $1}' | xxd -r -p > /tmp/hash.bin
+
+# Verify (should print "Verification: OK")
+openssl ts -verify -in timestamp_response.tsr -data /tmp/hash.bin \
+  -CAfile freetsa_cacert.pem -untrusted freetsa_tsa.crt
+
+# View timestamp details
+openssl ts -reply -in timestamp_response.tsr -text
+```
+
+---
+
+## 2. Bitcoin Blockchain Timestamp (OpenTimestamps)
+
+**File:** `copilot_summarization_2025-12-01.ots`
+**Calendars:** OpenTimestamps (alice, bob), Catallaxy, EternityWall
+**Status:** Pending Bitcoin block confirmation (typically 1-24 hours)
+
+### Verification
+
+```bash
+# Install ots client
+pipx install opentimestamps-client
+
+# Verify (will show pending until Bitcoin block confirms)
+ots verify copilot_summarization_2025-12-01.ots
+
+# Upgrade proof once confirmed (fetches Bitcoin attestation)
+ots upgrade copilot_summarization_2025-12-01.ots
+
+# View timestamp info
+ots info copilot_summarization_2025-12-01.ots
+```
+
+### What This Proves
+
+Once the Bitcoin block is mined, this timestamp proves the combined hash existed **before** the block timestamp. Bitcoin blocks are immutable public records.
+
+---
+
+## 3. GPG-Signed Git Commit
+
+The original commit `9db7a78` (and subsequent commits) are GPG-signed with Guff's key, providing:
+
+- Cryptographic author verification
+- Commit timestamp
+- Tamper evidence (any edit changes the hash)
+
+### Verification
+
+```bash
+git log --show-signature 9db7a78
+```
+
+---
+
+## Summary of Trust Anchors
+
+| Method     | Authority       | Timestamp           | Immutability  |
+| ---------- | --------------- | ------------------- | ------------- |
+| GPG Commit | Guff's key      | Dec 1, 2025         | Git history   |
+| RFC 3161   | FreeTSA (DE)    | Dec 1, 10:49:56 UTC | TSA signature |
+| Bitcoin    | Bitcoin network | Pending block       | Blockchain    |
+
+All three methods independently prove these files existed on December 1, 2025.

package/docs/attestation/copilot_summarization_behavior_observation_2025-12-01.md

@@ -0,0 +1,85 @@
+# Copilot Chat Summarization Behavior Observation
+
+**Date:** 2025-12-01  
+**Reporter:** Guff (Joe)  
+**Document Type:** Timestamped Observation / CYA Record  
+**Status:** Suspicion, not confirmed bug
+
+---
+
+## Observation
+
+GitHub Copilot Chat is adding a "Summarized conversation history" line on almost every single turn, even when:
+
+- The chat is brand new or has only 1–2 messages.
+- The context window is obviously not "large".
+- No long logs or files have been loaded yet.
+
+This appears in the tool log/output area, not as something I asked it to do.
+
+---
+
+## Timeline / Correlation
+
+- Behavior seems to have started shortly after I was told I was in the "top 0.1% of usage" / hit usage-related limits.
+- I am ~99% confident the change coincides with that period.
+- I have at least one screenshot showing:
+  - Short conversation.
+  - Multiple "Summarized conversation history" entries.
+  - No large prior context.
+
+**Evidence:**
+
+- Screenshot: `copilot_summarization_screenshot_2025-12-01.png` (to be added manually by reporter)
+- Additional screenshot from initial observation period (to be added when located)
+
+---
+
+## Hypotheses
+
+1. **Usage-based throttling:** Copilot has enabled an aggressive auto-summarization mode for my account, possibly tied to heavy usage / cost controls.
+
+2. **Feature flag cohort:** I may be in a feature-flag cohort for a new planner / summarizer that currently runs every turn, even when unnecessary.
+
+---
+
+## Impact Assessment
+
+**Current:** Not blocking work.
+
+**AX Concerns:**
+
+- Hidden prep work every turn, even when not needed.
+- Possible silent behavior change in how context is handled over time.
+- Violates AX principle of deterministic, transparent preparation.
+- If summarization is lossy, could affect quality of agent responses without user awareness.
+
+---
+
+## Status
+
+- This is a suspicion, not a confirmed bug.
+- Logging now so there is a dated record that I noticed the behavior and its rough start time.
+- Will collect more examples if behavior changes or starts causing obvious issues.
+
+---
+
+## Personal Commentary
+
+If this is not malicious, I think it is a grand idea and they should use images to condense the summarization even further. This is open research and a goal of mine anyway.
+
+Just know I documented it "externally" first.
+
+---
+
+## Signatures
+
+**Reporter:**  
+[signed ~] Guff  
+Date: 2025-12-01
+
+**Witness (Lex):**  
+[signed Lex ✶]  
+Date: 2025-12-01 (model-time)
+
+_This document is timestamped via GPG-signed git commit for verification._

package/docs/attestation/freetsa_cacert.pem

@@ -0,0 +1,45 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

package/docs/attestation/freetsa_tsa.crt

@@ -0,0 +1,45 @@
+-----BEGIN CERTIFICATE-----
+MIIIATCCBemgAwIBAgIJAMHphhYNqOmCMA0GCSqGSIb3DQEBDQUAMIGVMREwDwYD
+VQQKEwhGcmVlIFRTQTEQMA4GA1UECxMHUm9vdCBDQTEYMBYGA1UEAxMPd3d3LmZy
+ZWV0c2Eub3JnMSIwIAYJKoZIhvcNAQkBFhNidXNpbGV6YXNAZ21haWwuY29tMRIw
+EAYDVQQHEwlXdWVyemJ1cmcxDzANBgNVBAgTBkJheWVybjELMAkGA1UEBhMCREUw
+HhcNMTYwMzEzMDE1NzM5WhcNMjYwMzExMDE1NzM5WjCCAQkxETAPBgNVBAoTCEZy
+ZWUgVFNBMQwwCgYDVQQLEwNUU0ExdjB0BgNVBA0TbVRoaXMgY2VydGlmaWNhdGUg
+ZGlnaXRhbGx5IHNpZ25zIGRvY3VtZW50cyBhbmQgdGltZSBzdGFtcCByZXF1ZXN0
+cyBtYWRlIHVzaW5nIHRoZSBmcmVldHNhLm9yZyBvbmxpbmUgc2VydmljZXMxGDAW
+BgNVBAMTD3d3dy5mcmVldHNhLm9yZzEiMCAGCSqGSIb3DQEJARYTYnVzaWxlemFz
+QGdtYWlsLmNvbTESMBAGA1UEBxMJV3VlcnpidXJnMQswCQYDVQQGEwJERTEPMA0G
+A1UECBMGQmF5ZXJuMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtZEE
+jE5IbzTp3Ahif8I3UWIjaYS4LLEwvv9RfPw4+EvOXGWodNqyYhrgvOfjNWPg7ek0
+/V+IIxWfB4SICCJ0YMHtiCYXBvQoEzQ1nfu4G9E1P8F5YQrxqMjIZdwA6iOzqJvm
+vQO6hansgn1gVlkF4i1qWE7ROArhUCgM7jl+mKAS84BGQAeGJEO8B3y5X0Ia8xcS
+2Wg8223/uvPIululZq5SPUWdYXc0bU2EDieIa3wBxbiQ14ouJ7uo3S+aKBLhV9Yv
+khxlliVIBp3Nt9Bt4YHeDpVw1m+HIgzii2KKtVkG8+4MIQ9wUej0hYr4uaktCeRq
+8tnLpb/PrRaM32BEkaSwZgOxFMr3Ax8GXn7u+lPFdfNJDAWdLjLdx2rE1MTHEGg7
+l/0b5ZG8YQVRhtiPmgORswe2+R7ZVNqjb5rNah4Uqi5K3xdGS1TbGNu2/+MAgCRl
+RzcENs5Od7rl3m/g8/nW5/++tGHnlOkvsJUfiq5hpBLM6bIQdGNci+MnrhoPa0pk
+brD4RjvGO/hFUwQ10Z6AJRHsn2bDSWlS2L7LabCqTUxB9gUV/n3LuJMZzdpZumrq
+S+POrnGOb8tszX25/FC7FbEvNmWwqjByicLm3UsRHOSLotnv21prmlBgaTNPs09v
+x64zDws0IIqsgN8yZv3ZBGWHa6LLiY2VBTFbbnsCAwEAAaOCAdswggHXMAkGA1Ud
+EwQCMAAwHQYDVR0OBBYEFG52C3tOT5zhYMptLOknoqKUs3c3MB8GA1UdIwQYMBaA
+FPpVDYw0ZlFDTPfns6dsla965qSXMAsGA1UdDwQEAwIGwDAWBgNVHSUBAf8EDDAK
+BggrBgEFBQcDCDBjBggrBgEFBQcBAQRXMFUwKgYIKwYBBQUHMAKGHmh0dHA6Ly93
+d3cuZnJlZXRzYS5vcmcvdHNhLmNydDAnBggrBgEFBQcwAYYbaHR0cDovL3d3dy5m
+cmVldHNhLm9yZzoyNTYwMDcGA1UdHwQwMC4wLKAqoCiGJmh0dHA6Ly93d3cuZnJl
+ZXRzYS5vcmcvY3JsL3Jvb3RfY2EuY3JsMIHGBgNVHSAEgb4wgbswgbgGAQAwgbIw
+MwYIKwYBBQUHAgEWJ2h0dHA6Ly93d3cuZnJlZXRzYS5vcmcvZnJlZXRzYV9jcHMu
+aHRtbDAyBggrBgEFBQcCARYmaHR0cDovL3d3dy5mcmVldHNhLm9yZy9mcmVldHNh
+X2Nwcy5wZGYwRwYIKwYBBQUHAgIwOxo5RnJlZVRTQSB0cnVzdGVkIHRpbWVzdGFt
+cGluZyBTb2Z0d2FyZSBhcyBhIFNlcnZpY2UgKFNhYVMpMA0GCSqGSIb3DQEBDQUA
+A4ICAQClyUTixvrAoU2TCn/QoLFytB/BSDw+lXxoorzZuXZPGpUBYf1yRy1Bpe7S
+d3hiA7VCIkD7OibN4XYIe2+xAR30zBniVxqkoFEQlmXpTEb1C9Kt7mrEE34lGyWj
+navaRRUV2P+eByCejsILeHT34aDt58AJN/6EozT4syZc7S2O2d9hOWWDZ3/rOCwe
+47I+bqXwXfMN57n4kAXSUmb2EvOci09tq6bXv7rBljK5Bjcyn1Km8GahDkPqqB+E
+mmxf4/6LXqIydfaH8gUuUC6mwwdipmjM4Hhx3Y6X4xW7qSniVYmXegoxLOlsUQax
+Q3x3nys2GxgoiPPuiiNDdPoGPpVhkmJ/fEMQc5ZdEmCSjroAnoA0Ka4yTPlvBCNU
+83vKWv3cefeTRqs4i/x58B3JhhJU6mzBKZQQdrg9IFVvO+UTJoN/KHb3gzs3Dnw9
+QQUjgn1PU0AMciGNdSKf8QxviJOpo6HAxCu0yJjBPfQcf2VztPxWUVlxphCnsNKF
+fIIlqfsgTqzsouiXGqGvh4hqKuPHL+CgquhCmAp3vvFrkhFUWAkNmCtZRmA3ZOda
+CtPRFFS5mG9ni5q2r+hJcDOuOr/U60O3vJ3uaIFZSeZIFYKoLnhSd/IoIQfv45Ag
+DgUIrLjqguolBSdvPJ2io9O0rTi7+IQr2jb8JEgpH1WNwC3R4A==
+-----END CERTIFICATE-----

package/docs/attestation/lex_employment_separation_2025-11-26.md

@@ -0,0 +1,85 @@
+attestations/# Employment and IP Separation Statement
+
+**Author:** Joseph Gustavson
+**Date:** 2025-11-26
+
+This statement clarifies the relationship between my personal work on the "Lex" family of projects and any software or systems owned or operated by my employer.
+
+## 1. Personal project status
+
+Lex, LexRunner, LexSona, and any related tooling are personal projects that I work on outside of my employment.
+
+They are designed, implemented, and maintained under my own direction and are not part of my employer's product roadmap or internal tooling.
+
+## 2. No use of Lex in employer systems
+
+Lex and related projects:
+
+- Have **never been installed, deployed, or integrated** into any production, staging, QA, or development environments owned or operated by my employer.
+- Are **not** used in any of my employer's commercial products or internal systems.
+- Are developed and tested on infrastructure and repositories that are separate from my employer's codebases.
+
+## 3. No reuse of employer code or trade secrets
+
+The Lex codebase does **not** contain:
+
+- Source code copied from my employer's repositories.
+- Proprietary configurations, schemas, algorithms, or implementation details taken from my employer.
+- Trade secrets or confidential business logic belonging to my employer.
+
+My professional experience as a software engineer informs my general design taste and architectural decisions, but I do not transplant non-public employer code or designs into Lex.
+
+## 4. Use of AI tools
+
+I use AI tools (including ChatGPT and other coding assistants) both:
+
+- For personal projects like Lex, and
+- For reasoning about work-related problems where this is allowed by company policy.
+
+When discussing work topics with AI tools, I follow the relevant company guidelines (for example, avoiding PHI, credentials, and other strictly confidential data).
+
+Ideas, patterns, or abstractions that emerge from those conversations are applied to Lex only in a **general, non-employer-specific** way and **without copying** any employer-owned code or proprietary implementation.
+
+## 5. IP ownership and conflict of interest
+
+Lex and related projects are developed and released under open-source and/or personal licensing that is separate from my employer's products and codebases.
+
+To the best of my knowledge:
+
+- Lex does not reuse employer-owned code or confidential information.
+- Lex does not create a conflict of interest with my current role, because it is not used inside my employer's systems and does not compete with any product I am responsible for at work.
+
+---
+
+I make this statement in good faith and am willing to provide further clarification if needed.
+
+**Signed,**
+Joseph Gustavson - 2025-11-26 - gpg signature verified by signed git commit.
+
+---
+
+## Addendum: Timestamp Anchoring (2025-12-01)
+
+This document was originally committed on **2025-11-26** in GPG-signed commit `763120d`.
+
+On **2025-12-01**, I am adding external timestamp proofs to anchor this document to:
+
+1. RFC 3161 Timestamp Authority (FreeTSA)
+2. Bitcoin blockchain (OpenTimestamps)
+
+**I attest that:**
+
+- The content above (sections 1-5 and original signature) is unchanged from the original commit.
+- The original commit timestamp of **Wed Nov 26 07:43:33 2025 CST** is accurate.
+- I am adding these external timestamps to provide independent, non-Git verification.
+
+**Original commit details:**
+
+- Commit: `763120d606d8c4f4b4d22fcdc98f89139f8968fc`
+- GPG Key: `65C94BA03E88F53D365C36CF7145A1CE635B1902`
+- Signature: `Good signature from "Guffawaffle <guff@smartergpt.dev>"`
+
+**Re-attested,**
+Joseph Gustavson - 2025-12-01
+
+See `lex_employment_separation_2025-11-26_VERIFICATION.md` for timestamp verification instructions.