@yiaany/ghostapi 0.1.9 → 0.2.1

package/CHANGELOG.md

@@ -4,6 +4,27 @@ All notable changes to GhostAPI will be documented in this file.
 
 The format follows the spirit of [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project uses semantic versioning once public releases begin.
 
+## Unreleased
+
+## 0.2.1 - 2026-09-01
+
+### Security
+
+- Corrected evidence semantics so unmeasured production-egress attempt counts are reported as `not measured` instead of a fabricated zero.
+- Reframed the bounded repository safety scan as a provider-risk heuristic scan and exposed its file, size, and extension limits.
+- Removed external font requests from the local dashboard and added a regression test for external dashboard asset URLs.
+- Added CodeQL, OSV, OpenSSF Scorecard, Dependabot, container scanning, coverage thresholds, and retained Linux egress test output.
+- Added locked compatibility tests for the official Stripe `22.6.0` and OpenAI `7.8.0` Node SDKs against a loopback-only GhostAPI server.
+
+### Changed
+
+- Repositioned GhostAPI as an AI-assisted local API simulation experiment with explicit non-goals and no customer-validation claims.
+- Added project provenance, contribution authorship guidance, full-tree formatting, and type-aware ESLint parsing.
+- Corrected 36 pre-0.2 Git author and committer identities from an accidental local tool identity to the contributing maintainer while preserving file trees, messages, and dates.
+- Removed fundraising, commercial, design-partner, community-operations, and enterprise-roadmap material from the public tree and npm package.
+- Added a release workflow for signed annotated tags, exact-tarball smoke testing, checksums, SBOM generation, build attestations, npm provenance, and post-publish `gitHead` verification.
+- Centered the README hero and dashboard product identity, and added responsive navigation and request/detail layouts for mobile screens.
+
 ## 0.1.8 - 2026-08-22
 
 ### Security

package/CONTRIBUTING.md

@@ -1,119 +1,132 @@
-# Contributing to GhostAPI
-
-Thanks for helping improve GhostAPI. This project aims to be small, safe, local-first, and useful for developers and AI coding agents.
-
-## Setup
-
-Requirements:
-
-- Node.js 20 or newer
-- npm
-
-Install dependencies:
-
-```bash
-npm install
-```
-
-Run the local development server:
-
-```bash
-npm run dev
-```
-
-Open:
-
-```text
-http://localhost:8080/dashboard
-```
-
-## Scripts
-
-```bash
-npm run typecheck
-npm run lint
-npm test
-npm run build
-npm run dev
-```
-
-Use these before opening a pull request:
-
-```bash
-npm run typecheck
-npm run lint
-npm test
-npm run build
-```
-
-## Tests
-
-Tests are written with Vitest and must stay local-only. Do not add tests that call real Stripe, Twilio, Resend, GitHub, OpenAI, or any other external API.
-
-Current test areas include:
-
-- Secret masking
-- Provider detection
-- Cache key stability
-- State save/read/list/delete
-- Provider error formatting
-- Prompt construction and JSON repair
-- Proxy flow integration
-- Dashboard/SSE event formatting
-
-Shared fixtures live in `test/fixtures/`.
-
-## Coding Style
-
-- TypeScript strict mode.
-- ESM modules.
-- Prefer functions and simple objects over classes.
-- Keep modules small and direct.
-- Avoid `any`; use `unknown` and narrow values where possible.
-- Add comments only where behavior is not obvious.
-- Keep user-facing errors actionable.
-- Do not introduce network calls to real provider APIs by default.
-
-## Adding A Provider
-
-GhostAPI intentionally keeps native adapters limited. For the MVP, native adapters are:
-
-- Stripe
-- Twilio
-- Resend
-- GitHub
-- Discord
-- OpenAI
-- Generic fallback
-
-Before adding a new native adapter, ask whether generic fallback plus prompt hints is enough. Native adapters should be reserved for providers where contract-specific behavior, validation, or error formatting is clearly worth maintaining.
-
-If a native adapter is justified:
-
-1. Read `docs/providers/authoring-packs.md`.
-2. Add one built-in pack under `src/providers/packs/`.
-3. Register it in `src/providers/registry.ts` without changing generic fallback.
-4. Add deterministic conformance fixtures and provider regression tests.
-5. Do not import network, filesystem, environment, or state-store capabilities into the pack.
-6. Update README provider coverage and the versioned capability manifest.
-
-## Adding Prompt Hints
-
-Most services should use generic fallback. To improve generic behavior:
-
-1. Add or refine lightweight inference in `src/ai/genericInference.ts`.
-2. Keep labels best-effort, such as `generic:shopify-like`.
-3. Do not add provider-specific validation or error formats for generic services.
-4. Add tests in `test/genericInference.test.ts`.
-5. Update README coverage if the change affects documented behavior.
-
-## Pull Request Checklist
-
-- The change is scoped and explained clearly.
-- `npm run typecheck` passes.
-- `npm test` passes.
-- `npm run build` passes.
-- New behavior has tests when practical.
-- No real external API calls were added by default.
-- Secrets are not logged, cached, sent to LLM prompts, or exposed in dashboard payloads.
-- README or examples are updated when user-facing behavior changes.
+# Contributing to GhostAPI
+
+Thanks for helping improve GhostAPI. This project aims to be small, safe, local-first, and useful for developers and AI coding agents.
+
+## Setup
+
+Requirements:
+
+- Node.js 20 or newer
+- npm
+
+Install dependencies from the lockfile:
+
+```bash
+npm ci
+```
+
+Run the local development server:
+
+```bash
+npm run dev
+```
+
+Open:
+
+```text
+http://localhost:8080/dashboard
+```
+
+## Scripts
+
+```bash
+npm run typecheck
+npm run lint
+npm test
+npm run test:coverage
+npm run build
+npm run dev
+```
+
+Use these before opening a pull request:
+
+```bash
+npm run typecheck
+npm run lint
+npm test
+npm run test:coverage
+npm run build
+```
+
+## Tests
+
+Tests are written with Vitest and must stay local-only. Do not add tests that call real Stripe, Twilio, Resend, GitHub, OpenAI, or any other external API.
+
+Current test areas include:
+
+- Secret masking
+- Provider detection
+- Cache key stability
+- State save/read/list/delete
+- Provider error formatting
+- Prompt construction and JSON repair
+- Proxy flow integration
+- Dashboard/SSE event formatting
+
+Shared fixtures live in `test/fixtures/`.
+
+## Coding Style
+
+- TypeScript strict mode.
+- ESM modules.
+- Prefer functions and simple objects over classes.
+- Keep modules small and direct.
+- Avoid `any`; use `unknown` and narrow values where possible.
+- Add comments only where behavior is not obvious.
+- Keep user-facing errors actionable.
+- Do not introduce network calls to real provider APIs by default.
+
+## Adding A Provider
+
+GhostAPI intentionally keeps native adapters limited. For the MVP, native adapters are:
+
+- Stripe
+- Twilio
+- Resend
+- GitHub
+- Discord
+- OpenAI
+- Generic fallback
+
+Before adding a new native adapter, ask whether generic fallback plus prompt hints is enough. Native adapters should be reserved for providers where contract-specific behavior, validation, or error formatting is clearly worth maintaining.
+
+If a native adapter is justified:
+
+1. Read `docs/providers/authoring-packs.md`.
+2. Add one built-in pack under `src/providers/packs/`.
+3. Register it in `src/providers/registry.ts` without changing generic fallback.
+4. Add deterministic conformance fixtures and provider regression tests.
+5. Do not import network, filesystem, environment, or state-store capabilities into the pack.
+6. Update README provider coverage and the versioned capability manifest.
+
+## Adding Prompt Hints
+
+Most services should use generic fallback. To improve generic behavior:
+
+1. Add or refine lightweight inference in `src/ai/genericInference.ts`.
+2. Keep labels best-effort, such as `generic:shopify-like`.
+3. Do not add provider-specific validation or error formats for generic services.
+4. Add tests in `test/genericInference.test.ts`.
+5. Update README coverage if the change affects documented behavior.
+
+## Pull Request Checklist
+
+- The change is scoped and explained clearly.
+- `npm run typecheck` passes.
+- `npm test` passes.
+- `npm run build` passes.
+- New behavior has tests when practical.
+- No real external API calls were added by default.
+- Secrets are not logged, cached, sent to LLM prompts, or exposed in dashboard payloads.
+- README or examples are updated when user-facing behavior changes.
+
+## Authorship And Commits
+
+- Use a human Git author for commits. Do not commit as `OpenCode <opencode@localhost>`.
+- Add `Assisted-by: OpenCode` only when AI assistance was substantial and materially affected the change.
+- Use pull requests and squash merge for changes to `main`.
+- Use focused Conventional Commit titles such as `fix(egress): reject unsupported allow hosts` or `docs(readme): clarify provider coverage`.
+- Preferred scopes are `provider`, `policy`, `egress`, `sanitizer`, `dashboard`, `mcp`, `hosted`, `release`, and `docs`.
+- Do not combine unrelated security, feature, and documentation work into one commit.
+
+See [`PROVENANCE.md`](PROVENANCE.md) for the project authorship statement.

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 GhostAPI contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 GhostAPI contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/PROVENANCE.md

@@ -0,0 +1,13 @@
+# Project Provenance
+
+GhostAPI is maintained by Yiaany.
+
+AI-assisted development tools, including OpenCode, were used for code generation, review, test generation, documentation drafting, and refactoring. The maintainer selected the architecture, defined product and security boundaries, reviewed and modified generated changes, ran verification, and accepts responsibility for the published code.
+
+AI assistance does not imply independent authorship. No claim is made that every line was typed manually.
+
+Security-sensitive changes require maintainer review, tests, and release evidence from the exact published commit.
+
+On September 1, 2026, the pre-0.2 history was rewritten to correct 36 commits accidentally recorded under the local `OpenCode <opencode@localhost>` identity to `hizyyo <kapolol2266@gmail.com>`. The reviewed replacement preserved every file tree, commit message, author date, and committer date; PR #20 records the validation and application procedure. This metadata correction does not remove this disclosure of AI-assisted development.
+
+New changes should use a human author and may include an `Assisted-by: OpenCode` trailer when the assistance was substantial.

package/README.md

@@ -1,37 +1,24 @@
-<p align="center">
-  <img src="docs/assets/ghostapi-avatar.png" alt="GhostAPI" width="104" height="104">
-</p>
-
-<h1 align="center">GhostAPI</h1>
-
-<p align="center">
-  <strong>The local internet for AI coding agents.</strong>
-</p>
-
-<p align="center">
-  Build and test third-party API integrations locally, without charging cards, sending messages, leaking production keys, or mutating real services.
-</p>
-
-<p align="center">
+<div align="center">
+  <img src="docs/assets/ghostapi-avatar.png" alt="GhostAPI logo" width="88" height="88">
+  <h1>GhostAPI</h1>
+  <p><strong>Local API simulation and test evidence for AI-assisted development.</strong></p>
+  <p>GhostAPI gives applications and coding agents a local target for selected Stripe, Resend, OpenAI, Twilio, GitHub, Discord, and generic REST workflows. It records heuristically sanitized traffic, injects deterministic failures, exposes MCP controls, and turns captured behavior into repeatable tests.</p>
+  <p>On supported Linux hosts, <code>ghostapi run</code> can execute a test command inside a loopback-only network namespace. It is not a hostile-code or filesystem sandbox.</p>
+  <p>
   <a href="https://www.npmjs.com/package/@yiaany/ghostapi"><img alt="npm" src="https://img.shields.io/npm/v/@yiaany/ghostapi?color=0f172a&label=npm"></a>
   <a href="https://github.com/yiaany/ghostapi/blob/main/LICENSE"><img alt="license" src="https://img.shields.io/badge/license-MIT-0f172a"></a>
   <a href="https://github.com/yiaany/ghostapi/actions/workflows/ci.yml"><img alt="ci" src="https://github.com/yiaany/ghostapi/actions/workflows/ci.yml/badge.svg"></a>
   <img alt="node" src="https://img.shields.io/badge/node-%3E%3D20-0f172a">
   <img alt="MCP" src="https://img.shields.io/badge/MCP-enabled-0f172a">
-</p>
-
-<p align="center">
-  <a href="#quickstart">Quickstart</a> ·
-  <a href="#what-you-get">Features</a> ·
-  <a href="#provider-support">Providers</a> ·
-  <a href="#mcp-for-agents">MCP</a> ·
-  <a href="#safety-boundaries">Safety</a> ·
-  <a href="#hosted-and-enterprise">Enterprise</a>
-</p>
-
-```bash
-npx @yiaany/ghostapi start --open
-```
+  </p>
+  <p>
+    <a href="#quickstart">Quickstart</a> ·
+    <a href="SECURITY.md">Security model</a> ·
+    <a href="docs/providers/">Provider coverage</a> ·
+    <a href="docs/releases/">Release evidence</a>
+  </p>
+  <p><code>npx @yiaany/ghostapi start --open</code></p>
+</div>
 
 <p align="center">
   <img src="docs/assets/dashboard.png" alt="GhostAPI dashboard with live local Stripe, OpenAI, and REST traffic">
@@ -41,7 +28,7 @@ npx @yiaany/ghostapi start --open
 
 Coding agents can write a Stripe checkout, an OpenAI workflow, a GitHub automation, or an email integration in minutes. The dangerous part is what happens when they run that code.
 
-Without a safe local target, a test can:
+When a client is configured against a live provider, a test can:
 
 - charge a real card;
 - send a real email or SMS;
@@ -49,7 +36,11 @@ Without a safe local target, a test can:
 - spend API credits;
 - leak credentials into logs, prompts, screenshots, or test fixtures.
 
-GhostAPI gives your application and coding agent a local API world at `127.0.0.1:8080`. Requests are detected, sanitized, recorded, and answered with deterministic provider-shaped responses. You can inspect the result in the dashboard, control behavior through MCP, and turn failures into repeatable tests.
+GhostAPI provides a local endpoint at `127.0.0.1:8080`. Requests sent to that endpoint are classified, heuristically sanitized, recorded in bounded local stores, and answered by implemented provider packs or generic fallback behavior. You can inspect the result in the dashboard, control local behavior through MCP, and turn captured failures into repeatable tests.
+
+## Verified Locally, Not Customer-Validated Yet
+
+The public repository contains reproducible tests for local provider simulation, Linux namespace enforcement, package installation, and hosted-pilot authorization. GhostAPI does not yet claim production customers, paid pilots, or a deployed team service.
 
 ## Quickstart
 
@@ -89,20 +80,20 @@ On Windows and macOS, `ghostapi run` fails closed because an equivalent process-
 
 ## What You Get
 
-| Feature | What it does |
-| --- | --- |
-| Local API sandbox | Gives SDKs and applications a local target instead of a live provider. |
-| Provider-shaped behavior | Returns realistic objects, validation errors, rate limits, declines, and failure payloads. |
-| Live dashboard | Shows requests and responses, filters traffic by provider, generates tests, and arms scenarios. |
-| MCP control plane | Lets compatible coding agents inspect state, read traffic, configure responses, and toggle Chaos Mode. |
-| Stateful synthetic worlds | Maintains deterministic local identities and state across Stripe, GitHub, email, and REST projections. |
-| Scenarios and record/replay | Saves sanitized sandbox traffic and replays it offline as deterministic fixtures. |
-| Contract drift checks | Imports bounded OpenAPI/HAR contracts and classifies breaking, non-breaking, and uncertain changes. |
-| Agent evals and evidence | Produces redacted, tamper-evident reports for local review and CI policy gates. |
-| Secret protection | Masks secret-shaped headers, query parameters, bodies, paths, events, prompts, and cache inputs. |
-| Fault testing | Forces latency, provider errors, card declines, rate limits, and other unhappy paths. |
-| Safety controls | Includes local approvals, scoped budgets, kill switches, circuit breakers, ledgers, and reconciliation for synthetic actions. |
-| Reliability tooling | Tracks local SLO samples, cost attribution, runtime health, backups, inventory, and attack-path metadata. |
+| Feature                     | What it does                                                                                                                              |
+| --------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------- |
+| Local API simulation        | Gives explicitly configured SDKs and applications a local target instead of a live provider.                                              |
+| Provider-shaped behavior    | Returns deterministic objects and errors shaped like the implemented subset of each provider API; it does not claim live-provider parity. |
+| Live dashboard              | Shows requests and responses, filters traffic by provider, generates tests, and arms scenarios.                                           |
+| MCP control plane           | Lets compatible coding agents inspect state, read traffic, configure responses, and toggle Chaos Mode.                                    |
+| Stateful synthetic worlds   | Maintains deterministic local identities and state across Stripe, GitHub, email, and REST projections.                                    |
+| Scenarios and record/replay | Saves sanitized sandbox traffic and replays it offline as deterministic fixtures.                                                         |
+| Contract drift checks       | Imports bounded OpenAPI/HAR contracts and classifies breaking, non-breaking, and uncertain changes.                                       |
+| Agent evals and evidence    | Produces bounded reports with a local self-consistency hash, verifiable while the runtime and local storage remain trusted.               |
+| Secret-risk reduction       | Heuristically masks recognized secret-shaped headers, query parameters, bodies, paths, events, prompts, and cache inputs.                 |
+| Fault testing               | Forces latency, provider errors, card declines, rate limits, and other unhappy paths.                                                     |
+| Safety controls             | Includes local approvals, scoped budgets, kill switches, circuit breakers, ledgers, and reconciliation for synthetic actions.             |
+| Reliability tooling         | Tracks local SLO samples, cost attribution, runtime health, backups, inventory, and attack-path metadata.                                 |
 
 ## Dashboard
 
@@ -124,16 +115,16 @@ GhostAPI has two levels of provider support.
 
 ### Stateful provider packs
 
-| Provider | Included behavior |
-| --- | --- |
-| Stripe | Customers, products, prices, subscriptions, invoices, payment intents, payment methods, checkout sessions, refunds, pagination, lifecycle scenarios, and signed local webhooks. |
-| Resend | Deterministic email-shaped requests, responses, validation, and failure behavior. |
+| Provider | Included behavior                                                                                                                                                               |
+| -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Stripe   | Customers, products, prices, subscriptions, invoices, payment intents, payment methods, checkout sessions, refunds, pagination, lifecycle scenarios, and signed local webhooks. |
+| Resend   | Deterministic email-shaped requests, responses, validation, and failure behavior.                                                                                               |
 
 ### Provider-shaped adapters and generic inference
 
-OpenAI, Twilio, GitHub, Discord, and generic REST routes are detected and receive provider-shaped mock responses and errors. These adapters are useful for local development, but they do not claim complete parity with every live-provider endpoint.
+OpenAI, Twilio, GitHub, Discord, and generic REST routes are detected and receive provider-shaped synthetic responses and errors. These adapters are useful for local development, but they do not claim complete parity with live-provider endpoints.
 
-Unsupported endpoints fail diagnostically instead of silently pretending that an operation succeeded.
+Unsupported Stripe and Resend pack operations fail diagnostically. Legacy adapters and generic REST inference may return a synthetic fallback response for unrecognized routes; such responses do not indicate provider support or parity.
 
 ## SDK Setup
 
@@ -147,8 +138,8 @@ export const stripe = new Stripe(
   {
     host: process.env.GHOSTAPI_HOST ?? "127.0.0.1",
     port: Number(process.env.GHOSTAPI_PORT ?? "8080"),
-    protocol: process.env.GHOSTAPI_PROTOCOL ?? "http"
-  }
+    protocol: process.env.GHOSTAPI_PROTOCOL ?? "http",
+  },
 );
 ```
 
@@ -159,7 +150,7 @@ import OpenAI from "openai";
 
 export const openai = new OpenAI({
   apiKey: process.env.OPENAI_API_KEY ?? "sk-ghostapi",
-  baseURL: process.env.GHOSTAPI_OPENAI_BASE_URL ?? "http://127.0.0.1:8080/v1"
+  baseURL: process.env.GHOSTAPI_OPENAI_BASE_URL ?? "http://127.0.0.1:8080/v1",
 });
 ```
 
@@ -186,7 +177,7 @@ Generic MCP configuration:
   "mcpServers": {
     "ghostapi": {
       "command": "npx",
-      "args": ["-y", "@yiaany/ghostapi", "mcp"]
+      "args": ["-y", "@yiaany/ghostapi@0.2.1", "mcp"]
     }
   }
 }
@@ -194,11 +185,11 @@ Generic MCP configuration:
 
 Available tools:
 
-| Tool | Purpose |
-| --- | --- |
-| `inspect_state` | Read current local API objects. |
-| `get_traffic_logs` | Inspect sanitized recent traffic. |
-| `set_api_behavior` | Force a deterministic response for a method and path. |
+| Tool                | Purpose                                                |
+| ------------------- | ------------------------------------------------------ |
+| `inspect_state`     | Read current local API objects.                        |
+| `get_traffic_logs`  | Inspect sanitized recent traffic.                      |
+| `set_api_behavior`  | Force a deterministic response for a method and path.  |
 | `toggle_chaos_mode` | Enable or disable local latency and failure injection. |
 
 Generate setup snippets for Cursor, Claude, Cline, Aider, Codex, OpenCode, Gemini CLI, Goose, OpenClaw, Hermes, and generic MCP clients:
@@ -207,6 +198,8 @@ Generate setup snippets for Cursor, Claude, Cline, Aider, Codex, OpenCode, Gemin
 npx @yiaany/ghostapi setup --write
 ```
 
+Connect only trusted local MCP clients. MCP tools can read retained traffic and state and can modify local simulation behavior; MCP is not an authentication or egress boundary. Pin the package version in persistent MCP configuration or use a reviewed local installation.
+
 ## Scenarios, Contracts, And Evals
 
 Record approved sandbox traffic into a sanitized offline bundle:
@@ -250,30 +243,40 @@ ghostapi eval \
   --ci
 ```
 
-## Safety Boundaries
+## Security Boundaries
 
-GhostAPI is designed to fail closed, but its boundaries are explicit:
+GhostAPI uses local-first defaults, explicit external-LLM opt-in, and heuristic secret masking. Its boundaries are explicit:
 
 - Real provider calls are disabled by default.
 - Ambient `OPENAI_API_KEY` does not enable external generation.
 - External LLM generation requires an explicit flag plus a separate `GHOSTAPI_LLM_API_KEY`.
-- Non-loopback access requires a strong dashboard token.
+- On non-loopback binds, every route except `/` and `/health` requires a strong `GHOSTAPI_AUTH_TOKEN`. The token provides access control, not encryption.
 - External response redirects, unsafe response headers, traversal, remote schema references, symlinks, archives, and oversized inputs are rejected where applicable.
 - Persistent stores have size, entry, retention, or rotation limits.
 - The Linux `run` backend provides loopback-only process network isolation when namespace preflight succeeds.
 - `run` is not a hostile-code filesystem sandbox.
-- Secret masking is heuristic. Use synthetic credentials and data even in local fixtures.
+- Secret masking is heuristic and incomplete. Use synthetic credentials and data even in local fixtures.
 - Local approval, action, credential, ledger, trust, and safety components execute synthetic operations only. They are not a production-provider executor.
+- Evidence hashes are local self-consistency checks, not signatures, immutable provenance, or proof against a same-user editor.
+- Current run evidence records namespace lifecycle and GhostAPI-local traffic; it does not enumerate kernel-denied socket attempts.
 
 Read the detailed threat models in [`docs/security`](docs/security) and the reporting policy in [`SECURITY.md`](SECURITY.md).
 
+## Explicit Non-Goals
+
+- No live-provider parity guarantee.
+- No complete secret-redaction guarantee.
+- No hostile-code filesystem sandbox.
+- No equivalent process-egress enforcement on Windows or macOS.
+- No deployed hosted service, SLA, compliance certification, or production credential executor.
+
 ## Platform Support
 
-| Platform | Local API and dashboard | `ghostapi run` enforcement |
-| --- | --- | --- |
-| Linux | Supported on Node.js 20+ | Supported when `unshare`, `iproute2`, and namespace preflight pass. |
-| Windows | Supported on Node.js 20+ | Not implemented; fails closed. |
-| macOS | Supported on Node.js 20+ | Not implemented; fails closed. |
+| Platform | Local API and dashboard  | `ghostapi run` enforcement                                          |
+| -------- | ------------------------ | ------------------------------------------------------------------- |
+| Linux    | Supported on Node.js 20+ | Supported when `unshare`, `iproute2`, and namespace preflight pass. |
+| Windows  | Supported on Node.js 20+ | Not implemented; fails closed.                                      |
+| macOS    | Supported on Node.js 20+ | Not implemented; fails closed.                                      |
 
 Check the current machine:
 
@@ -289,20 +292,9 @@ GET /health             process liveness, HTTP 200 while state can be evaluated
 GET /health/readiness   structural readiness, HTTP 503 when a required store is unsafe
 ```
 
-## Hosted And Enterprise
-
-The `hosted/` directory contains an implemented but not yet deployed team pilot. It includes:
-
-- organizations, projects, invitations, memberships, and role-based access;
-- tenant-safe report and scenario APIs;
-- hashed and rotatable CI ingest keys;
-- bounded request handling, CSRF checks, security headers, quotas, and abuse limits;
-- PostgreSQL migrations, idempotency, outbox dispatch, worker leases, retries, dead letters, and retention cleanup;
-- Redis-backed rate limiting, QStash verification, readiness checks, and a non-root Docker image.
-
-It is not advertised as a production SaaS yet. Live OAuth, Redis, QStash, load, failover, backup/restore, and disaster-recovery behavior must still be proven in staging before a paid pilot.
+## Hosted Experiment
 
-The detailed product plan for a complete enterprise edition is available in [`docs/enterprise-product-roadmap-ru.md`](docs/enterprise-product-roadmap-ru.md).
+No hosted or enterprise service is currently available. The `hosted/` directory is an undeployed experimental implementation, excluded from the npm package and unsupported for production use. Its live OAuth, dependency, migration, load, failover, backup, and disaster-recovery behavior has not been proven in staging.
 
 ## Development
 
@@ -311,6 +303,7 @@ npm ci
 npm run lint
 npm run typecheck
 npm test
+npm run test:coverage
 npm run build
 npm run smoke:package
 ```
@@ -323,7 +316,7 @@ npm ci
 npm run check
 ```
 
-See [`CONTRIBUTING.md`](CONTRIBUTING.md), [`docs/release-readiness.md`](docs/release-readiness.md), and [`docs/development/verification-0.1.8.md`](docs/development/verification-0.1.8.md) for the complete verification boundary.
+See [`CONTRIBUTING.md`](CONTRIBUTING.md), [`PROVENANCE.md`](PROVENANCE.md), and [`docs/releases/`](docs/releases/) for the contribution and release boundaries.
 
 ## Documentation
 
@@ -335,9 +328,10 @@ See [`CONTRIBUTING.md`](CONTRIBUTING.md), [`docs/release-readiness.md`](docs/rel
 - [Stripe provider pack](docs/providers/stripe-core-pack.md)
 - [Security policy](SECURITY.md)
 - [Threat models](docs/security)
+- [Project provenance](PROVENANCE.md)
+- [Release evidence](docs/releases/)
 - [Release readiness](docs/release-readiness.md)
 - [Migration and rollback](docs/release-migration-and-rollback.md)
-- [Enterprise roadmap in Russian](docs/enterprise-product-roadmap-ru.md)
 
 ## License