torusguard 1.3.5 → 1.4.0

package/skills/torusguard/payload/workflows/torusguard-status.md

@@ -0,0 +1,103 @@
+---
+description: Read-only diagnostic overview of workspace security posture, active configuration, rules catalog, and run history.
+tools: Read, Grep, Glob, Bash
+version: 1.4.0
+agent: reviewer
+lifecycle-phase: System / Diagnostics
+required-skills:
+  - torusguard-status
+scripts-binding:
+  - .torusguard/scripts/report_sync.py
+  - .torusguard/scripts/run_manager.py
+---
+
+# /torusguard status — Workspace Security Posture & Diagnostic Overview
+
+$ARGUMENTS
+
+---
+
+## Objective
+Read-only diagnostic overview of workspace security posture, active configuration, and run history.
+
+Supported CLI flags:
+- `npx torusguard status [--target <dir>]` : Diagnostic check on specified project directory
+
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Inspect workspace state and configuration records prior to status display:
+1. **Config State (`.torusguard/config/torusguard.json`):** Confirm workspace initialization and read detected stack.
+2. **Active Rules Directory (`.torusguard/rules/active/`):** Count active rule files.
+3. **Run Folder Ledger (`.torusguard/runs/`):** Check run history and locate latest `manifest.json`.
+4. **Scope Record (`.torusguard/config/scope.json`):** Check whether runtime authorization TTL is active or expired.
+5. **Read-Only Invariant:** Ensure command performs zero file modifications or disk mutations.
+
+---
+
+## When to Use /torusguard status
+
+| Trigger Scenario | Recommended Action |
+| :--- | :--- |
+| Checking workspace configuration and active security posture | Run `/torusguard status` |
+| Reviewing recent audit runs and finding counts | Run `/torusguard status` |
+| Checking active legal scope authorization TTL | Run `/torusguard status` |
+| Initializing workspace for the first time | Run `/torusguard init` |
+| Executing full security scan | Run `/torusguard audit` |
+
+---
+
+## Living Report Invariant
+- Reads current health score and status breakdown directly from `security_report.md`.
+- Displays 18 rule families and 74 rules in standardized 75-column terminal cards.
+
+## Execution Steps
+
+1. **Read Configuration:** Load `.torusguard/config/torusguard.json`; extract stack, version, and enabled rule count.
+2. **Enumerate Active Rules:** Count rule files physically present in `.torusguard/rules/active/`.
+3. **Inspect Run History:**
+   ```bash
+   python .torusguard/scripts/run_manager.py list
+   ```
+4. **Evaluate Scope Expiry:** Parse `.torusguard/config/scope.json`; report if TTL is valid or expired.
+5. **Print Status Overview:** Render complete workspace diagnostic overview card.
+
+---
+
+## Failure Recovery
+
+- **Uninitialized Workspace:** If config is missing, prompt user to execute `/torusguard init`.
+- **Zero Runs Found:** Display clean status card noting no historical audit runs exist yet.
+- **Corrupt Config File:** Report parsing error and recommend re-running `/torusguard init`.
+- **Halt Trigger:** Abort command if read access to `.torusguard/` is denied.
+
+---
+
+## Hallucination Guard
+
+- ❌ Never display fabricated finding counts not substantiated by run manifests.
+- ❌ Never execute modifying shell commands or edit source code during status inspection.
+- ✅ Always report factual file counts from `.torusguard/rules/active/` and `.torusguard/runs/`.
+
+---
+
+## Output Card Format
+
+```markdown
+### 🛡️ TorusGuard Workspace Status
+- **Version:** v0.9.2
+- **Framework Detected:** [Stack or None]
+- **Active Rules:** [Count] rules active in `.torusguard/rules/active/`
+- **Total Runs:** [Count] historical runs recorded
+- **Latest Run:** `run-YYYYMMDD-HHMMSS` ([Findings Count] findings)
+- **Scope Status:** [Authorized (TTL Active) / Expired / Unconfigured]
+- **Health Posture:** [GOOD / ACTION NEEDED]
+```
+
+---
+
+## Next Steps
+
+1. Run `/torusguard audit` to scan codebase for security vulnerabilities.
+2. Run `/torusguard authorize` to configure or refresh live target scope.

package/skills/torusguard/payload/workflows/torusguard-verify.md

@@ -0,0 +1,100 @@
+---
+description: Evidence sufficiency verification, live disk line match audit, and finding score refinement.
+tools: Read, Grep, Glob, Bash, Write
+version: 1.3.6
+agent: validator
+lifecycle-phase: Phase 3a (Evidence Verification)
+required-skills:
+  - torusguard-verify
+scripts-binding:
+  - .torusguard/scripts/report_sync.py
+  - .torusguard/scripts/finding_scorer.py
+---
+
+# /torusguard verify — Evidence Verification & Score Refinement
+
+$ARGUMENTS
+
+---
+
+## Objective
+Evidence sufficiency verification, live disk line match audit, and finding score refinement.
+
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Inspect finding records and evidence integrity before verification:
+1. **Latest Run Records (`.torusguard/runs/`):** Locate most recent audit run directory.
+2. **Finding Files:** Confirm `findings.md` or `findings.json` exists in the target run folder.
+3. **Live File Drift:** Assert cited source files have not been edited or relocated on disk.
+4. **Scoring Model Calibration:** Ensure `finding_scorer.py` evaluates all 5 rubric dimensions.
+5. **Role Boundary:** Enforce validator role; do not apply code modifications during verification.
+
+---
+
+## When to Use /torusguard verify
+
+| Trigger Scenario | Recommended Action |
+| :--- | :--- |
+| Auditing whether static findings are valid code flaws | Run `/torusguard verify` |
+| Upgrading Medium confidence finding to Confirmed | Run `/torusguard verify` |
+| No audit run executed yet | Run `/torusguard audit` first |
+| Running live network requests against endpoints | Run `/torusguard web-validate` |
+| Generating patch after verification | Run `/torusguard harden` |
+
+---
+
+## Living Report Invariant
+- Confirmed evidence sufficiency transitions findings in `security_report.md` to `VERIFIED 🟠`.
+- False positives transition to `FALSE POSITIVE ⚪`.
+
+## Execution Steps
+
+1. **Locate Target Findings:** Load active findings from latest run directory.
+2. **Live Disk Line Match:** Read current code at cited line ranges; verify AST snippet matches.
+3. **Audit Evidence Sufficiency:** Assess whether taint path is unbroken and caller context is exposed.
+4. **Refine Confidence Scores:**
+   ```bash
+   python .torusguard/scripts/finding_scorer.py --run <run_dir> --verify
+   ```
+5. **Classify Status:** Assign verified state (`Confirmed`, `Plausible`, or `False Positive / Disputed`).
+6. **Emit Verification Ledger:** Write `verified-evidence.md` into the active run folder.
+
+---
+
+## Failure Recovery
+
+- **Missing Run Folder:** Run `/torusguard audit` first to produce a valid run baseline.
+- **Line Drift Detected:** Flag line mismatch; scan nearby lines (±25) for relocated AST sink.
+- **Malformed Finding JSON:** Repair JSON structure using finding schema before scoring.
+- **Halt Trigger:** Abort if cited files are completely deleted from disk.
+
+---
+
+## Hallucination Guard
+
+- ❌ Never confirm a finding if the cited sink has already been sanitized by middleware.
+- ❌ Never bump confidence score without documenting unbroken taint source-to-sink flow.
+- ✅ Always anchor line matches to live disk reads using `view_file`.
+
+---
+
+## Output Card Format
+
+```markdown
+### 🧪 TorusGuard Evidence Verification
+- **Run ID:** `run-YYYYMMDD-HHMMSS-audit`
+- **Findings Evaluated:** [Count] findings
+- **Confirmed Real:** [Count] verified flaws
+- **Downgraded / False Positives:** [Count] filtered out
+- **Refined Mean Score:** [Score]/100
+- **Ledger:** `.torusguard/runs/<run_id>/verified-evidence.md`
+```
+
+---
+
+## Next Steps
+
+1. Run `/torusguard web-validate` if live endpoint probing is required.
+2. Run `/torusguard harden` to build surgical patch bundles for verified flaws.

package/skills/torusguard/payload/workflows/torusguard-web-validate.md

@@ -0,0 +1,96 @@
+---
+description: Authorized HTTP probing, token redaction, transparent audit header injection, and replay trace capture.
+tools: Read, Grep, Glob, Bash, Write
+version: 1.3.6
+agent: validator
+lifecycle-phase: Phase 3b (Runtime Web Validation)
+required-skills:
+  - torusguard-web-validate
+scripts-binding:
+  - .torusguard/scripts/report_sync.py
+  - .torusguard/scripts/safety_gate.py
+---
+
+# /torusguard web-validate — Bounded HTTP Probing & Session Capture
+
+$ARGUMENTS
+
+---
+
+## Objective
+Authorized HTTP probing, token redaction, transparent audit header injection, and replay capture.
+
+---
+
+## Mandatory Pre-Flight Context Inspection
+
+Inspect authorization parameters and safety limits before sending HTTP requests:
+1. **Active Scope (`.torusguard/config/scope.json`):** Assert target host and path are authorized with valid TTL.
+2. **Safety Gate Classification:** Test proposed endpoint against `.torusguard/scripts/safety_gate.py`.
+3. **Sensitive Route Guard:** Ensure destructive endpoints (`DELETE`, account drops) are never called automatically.
+4. **Token Redaction Pipeline:** Ensure bearer tokens and session cookies are masked (`Bearer [REDACTED]`).
+5. **Request Budget:** Enforce maximum cap of 50 requests per validation session.
+
+---
+
+## When to Use /torusguard web-validate
+
+| Trigger Scenario | Recommended Action |
+| :--- | :--- |
+| Testing live route accessibility and security headers | Run `/torusguard web-validate` |
+| Verifying cookie security flags (`HttpOnly`, `Secure`, `SameSite`) | Run `/torusguard web-validate` |
+| Checking CORS headers and authentication barriers | Run `/torusguard web-validate` |
+| Pure static source code analysis | Run `/torusguard audit` |
+| Confirming exploitable attack vectors | Run `/torusguard exploit-check` |
+
+---
+
+## Execution Steps
+
+1. **Verify Legal Scope:** Check target URL against `.torusguard/config/scope.json`.
+2. **Invoke Safety Gate:**
+   ```bash
+   python .torusguard/scripts/safety_gate.py check --url <target_url> --method GET
+   ```
+3. **Dispatch Non-Destructive Probe:** Send bounded HTTP request with audit header `X-TorusGuard-AuthID`.
+4. **Redact Sensitive Headers:** Sanitize auth tokens and credentials in request and response objects.
+5. **Write Replay Artifacts:**
+   Record sanitized trace in `.torusguard/runs/<run_id>/requests.json` and emit `web-validation.md`.
+
+---
+
+## Failure Recovery
+
+- **Target Offline:** Verify local dev server is active and accessible on designated host port.
+- **Safety Gate Rejection (Manual Only):** Halt probe immediately; report endpoint requires human manual test.
+- **Rate Limit / 429:** Back off exponentially (1s, 2s, 4s); stop session if 429 persists.
+- **Halt Trigger:** Abort if target domain deviates from authorized allowlist in `scope.json`.
+
+---
+
+## Hallucination Guard
+
+- ❌ Never dispatch HTTP requests outside domains explicitly listed in `.torusguard/config/scope.json`.
+- ❌ Never write raw Authorization headers or plaintext secrets to disk.
+- ✅ Always include transparent audit headers (`X-TorusGuard-AuthID`).
+
+---
+
+## Output Card Format
+
+```markdown
+### 🌐 TorusGuard Web Validation
+- **Target Host:** [Host URL]
+- **Endpoints Probed:** [Count] routes tested
+- **Security Headers:** [CSP / HSTS / CORS status]
+- **Cookie Security:** [HttpOnly / Secure / SameSite status]
+- **Replay Trace:** `.torusguard/runs/<run_id>/replay.json`
+- **Status:** COMPLETED — non-destructive probe finished
+```
+
+---
+
+## Next Steps
+
+1. Run `/torusguard exploit-check` to confirm if reachable flaws constitute verified exploits.
+2. Run `/torusguard harden` to build surgical remediation diffs.

package/skills/torusguard/payload/workflows/torusguard.md

@@ -0,0 +1,19 @@
+---
+description: TorusGuard Autonomous Security Command Engine — run static security audits, authorized runtime web validation, governed remediation, and SARIF exports.
+version: 1.3.6
+tools: Read, Grep, Glob, Bash, Edit, Write
+agent: auditor
+---
+
+# /torusguard — Autonomous Application Security Guardrails
+
+$ARGUMENTS
+
+## Objective
+Execute TorusGuard security workflows across polyglot codebases (Python, TypeScript, Go, Rust, Java, C#, PHP, and 16+ ecosystems) using either AI chat slash commands or dedicated terminal CLI commands.
+
+## Execution
+Parse the requested action from `$ARGUMENTS` (e.g. `audit`, `verify`, `web-validate`, `exploit-check`, `harden`, `apply`, `rollback`, `recheck`, `recipes`, `report`, `status`, `init`):
+1. **If action is omitted or 'status':** View `.torusguard/workflows/status.md` and report posture (or run `npx torusguard status`).
+2. **If action is specified:** Load the dedicated workflow from `.torusguard/workflows/<action>.md` and matching skill from `skills/torusguard-<action>/SKILL.md` (or run equivalent CLI command: `npx torusguard <action>`).
+3. Follow the phase execution steps defined in the workflow.

package/skills/torusguard/payload/workflows/verify.md

@@ -1,7 +1,7 @@
 ---
 description: Evidence sufficiency verification, live disk line match audit, and finding score refinement.
 tools: Read, Grep, Glob, Bash, Write
-version: 1.3.5
+version: 1.3.6
 agent: validator
 lifecycle-phase: Phase 3a (Evidence Verification)
 required-skills:

package/skills/torusguard/payload/workflows/web-validate.md

@@ -1,7 +1,7 @@
 ---
 description: Authorized HTTP probing, token redaction, transparent audit header injection, and replay trace capture.
 tools: Read, Grep, Glob, Bash, Write
-version: 1.3.5
+version: 1.3.6
 agent: validator
 lifecycle-phase: Phase 3b (Runtime Web Validation)
 required-skills:

package/skills/torusguard-apply/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: torusguard-apply
 description: Apply governed remediation patches to disk with pre-apply rollback snapshots and Human Gate validation via CLI or AI Agent.
-version: 1.3.5
+version: 1.3.6
 workflow: .torusguard/workflows/apply.md
 tools: Read, Grep, Glob, Write, replace_file_content, run_command
 scripts-binding:

package/skills/torusguard-audit/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: torusguard-audit
 description: Static AST security scanning, line-shift invariant fingerprinting, root-cause clustering, and 0-100 confidence scoring via CLI or AI Agent.
-version: 1.3.5
+version: 1.3.6
 workflow: .torusguard/workflows/audit.md
 tools: Read, Grep, Glob, Write, run_command
 scripts-binding:

package/skills/torusguard-authorize/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: torusguard-authorize
 description: Register and validate runtime target authorization boundaries — scope boundaries, ownership proofs, TTL expiration, and Safety Gate enforcement.
-version: 1.3.5
+version: 1.3.6
 workflow: .torusguard/workflows/authorize.md
 tools: Read, Grep, Glob, Write, run_command
 scripts-binding:

package/skills/torusguard-exploit-check/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: torusguard-exploit-check
 description: Safe, non-destructive confirmation of exploitability using inert canary tokens and sentinels.
-version: 1.3.5
+version: 1.3.6
 workflow: .torusguard/workflows/exploit-check.md
 tools: Read, Grep, Glob, Bash, Write, run_command
 scripts-binding:

package/skills/torusguard-full/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: torusguard-full
 description: Master 7-stage security pipeline orchestrator — coordinates discovery, authorization, static audit, runtime validation, governed remediation, recheck, and reporting.
-version: 1.3.5
+version: 1.3.6
 workflow: .torusguard/workflows/audit.md
 tools: Read, Grep, Glob, Bash, Edit, Write, run_command
 scripts-binding:

package/skills/torusguard-harden/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: torusguard-harden
 description: Package surgical remediation bundles conforming to the Ponytail Protocol (<= 35 additions, <= 25 deletions) via CLI or AI Agent.
-version: 1.3.5
+version: 1.3.6
 workflow: .torusguard/workflows/harden.md
 tools: Read, Grep, Glob, Write, run_command
 scripts-binding:

package/skills/torusguard-init/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: torusguard-init
 description: Initialize TorusGuard workspace — detect project stack, activate tailored TG-* security rules, and generate SECURITY.md baseline via CLI or AI Agent.
-version: 1.3.5
+version: 1.3.6
 workflow: .torusguard/workflows/init.md
 tools: Read, Grep, Glob, Write, run_command
 scripts-binding:

package/skills/torusguard-recheck/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: torusguard-recheck
 description: Execute targeted differential AST re-scan against modified files, verify fix closure, and assert zero regressions via CLI or AI Agent.
-version: 1.3.5
+version: 1.3.6
 workflow: .torusguard/workflows/recheck.md
 tools: Read, Grep, Glob, Write, run_command
 scripts-binding:

package/skills/torusguard-report/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: torusguard-report
 description: Generate executive posture reports, export OASIS SARIF v2.1.0 logs, and render dark-mode HTML dashboards via CLI or AI Agent.
-version: 1.3.5
+version: 2.2.0
 workflow: .torusguard/workflows/report.md
 tools: Read, Grep, Glob, Write, run_command
 scripts-binding:
@@ -15,61 +15,78 @@ scripts-binding:
 # TorusGuard Report — Posture Reporting & SARIF / HTML Export
 
 ## Objective
-Aggregate findings, verification traces, and recheck results into an auditable executive security report, export schema-compliant OASIS SARIF v2.1.0 logs for CI/CD pipelines, and render zero-dependency single-file visual HTML posture reports.
+Aggregate findings, verification traces, and recheck results into an auditable executive security report, export schema-compliant OASIS SARIF v2.1.0 logs for CI/CD pipelines, and render zero-dependency single-file visual HTML posture reports with full dual-mode parity.
 
 ---
 
-## Two Execution Modes
+## Execution Steps
 
 ### Mode A: Automated CLI Execution
 Run the report engine from your terminal:
 ```bash
-# Generate visual dark-mode HTML dashboard
+# Generate visual dark-mode HTML dashboard (defaults to report.html at project root)
 npx torusguard report --html
 
 # Export OASIS SARIF v2.1.0 for GitHub Code Scanning / CI
 npx torusguard report --sarif
 
-# Generate both HTML and SARIF for latest run
+# Generate both HTML and SARIF in a single pass
 npx torusguard report --html --sarif
 
-# Generate report for a specific project directory
-npx torusguard report ./examples/vulnerable-react-express --html
+# Custom HTML output location
+npx torusguard report --html --out ./docs/security-audit.html
 
-# Target a specific run ID
-npx torusguard report --run run-20260910-121618-audit --html
+# Target a specific subproject / monorepo package
+npx torusguard report --target ./apps/api --html
 ```
+
 **Under the Hood:**
-- Invokes `python .torusguard/scripts/html_reporter.py` to compile self-contained, offline-ready HTML reports with dynamic filtering, posture gauge, and cluster summaries at `.torusguard/runs/<run_id>/report.html`.
-- Invokes `python .torusguard/scripts/sarif_exporter.py` to produce OASIS SARIF v2.1.0 logs at `.torusguard/runs/<run_id>/results.sarif`.
+- Invokes `python .torusguard/scripts/html_reporter.py` to compile self-contained, offline-ready HTML reports with dynamic filtering, posture gauge, directory attack surface heatmap, and golden recipe explorer at `report.html` (workspace root) and mirrors to `.torusguard/runs/report-latest.html`.
+- Invokes `python .torusguard/scripts/sarif_exporter.py` to produce OASIS SARIF v2.1.0 logs at `.torusguard/runs/results-latest.sarif`.
 - Finalizes `manifest.json` metrics and updates historical posture scoring.
-- Displays 75-column terminal cards.
+- Displays standardized 75-column terminal cards adhering to visual width invariants.
 
 ### Mode B: In-Session AI Chat Agent Reporting
 When generating security posture summaries in AI chat:
 1. **Aggregate Run Data:** Inspect `findings.json`, `remediation.md`, and `recheck.md` from the active run.
-2. **Calculate Posture Score:** Compute posture score ($0$–$100$) based on severity weighting (Critical: 25, High: 15, Medium: 5, Low: 2).
+2. **Calculate Posture Score:** Compute posture score ($0$–$100$) based on severity weighting (Critical: 25, High: 15, Medium: 5, Low: 2). Clean repositories earn 100/100 across 74 defended invariants.
 3. **Format Executive Card:** Present finding counts, closed vulnerabilities, remaining risks, and compliance posture.
-4. **Export Artifacts:** Verify that `report.html` and `results.sarif` are serialized to disk.
+4. **Export Artifacts:** Verify that `report.html` and `results-latest.sarif` are serialized to disk.
+5. **Keep Living Ledger in Lockstep:** Ensure `security_report.md` reflects all findings and verified closures.
+
+---
+
+## Zero-CDN & Offline Guarantee
+- Zero external `<script>` or `<link>` tags. All styles, fonts, SVG icons, and scripts are embedded directly inside `report.html`.
+- Full offline inspection: can be opened directly via `file:///` without an active internet connection.
+- In-browser artifact downloads (SARIF v2.1.0 and CSV) use native `URL.createObjectURL(new Blob(...))` with zero network calls.
 
 ---
 
-## SARIF v2.1.0 Specification
+## SARIF v2.1.0 Output Specification
 - **Schema:** `https://docs.oasis-open.org/sarif/sarif/v2.1.0/cos02/schemas/sarif-schema-2.1.0.json`
-- **Tool Driver:** `name: TorusGuard`, `semanticVersion: 1.3.5`, full rules catalog in `driver.rules`.
+- **Tool Driver:** `name: TorusGuard`, `semanticVersion: 1.3.6`, full rules catalog in `driver.rules`.
 - **Automation Details:** `automationDetails.id: "torusguard/static"` to avoid collisions in multi-scanner CI/CD pipelines.
 - **Fingerprints:** `partialFingerprints.primaryLocationLineHash` with SHA-256 context hash.
 
 ---
 
-## Output Card Format
+## Safety Constraints
+- Never display raw secrets, tokens, or credentials in terminal outputs or emitted reports.
+- Enforce read-only state for `report` actions — never modify source code during report generation.
+- Ensure atomic writes with fallback retry to prevent corrupt reports during concurrent browser viewing.
+- Respect monorepo target boundaries when `--target` is specified.
+
+---
+
+## Output Format
 ```markdown
-### 📊 TorusGuard Security Posture Report Emitted
-- **Run ID:** `run-20260910-121618-audit`
-- **Posture Score:** 85 / 100 (HIGH SECURITY)
-- **Findings Summary:** 3 Evaluated · 2 Confirmed Fixed · 1 Unresolved
-- **HTML Dashboard:** `.torusguard/runs/<run_id>/report.html` (View in browser)
-- **SARIF v2.1.0 Export:** `.torusguard/runs/<run_id>/results.sarif` (Ready for CI)
+### 🛡️ TorusGuard Security Posture Report Emitted
+- **Posture Score:** 100 / 100 (OPTIMAL DEFENSE)
+- **Invariants Defended:** 74 Defended · 0 Harmed (74 Rules)
+- **HTML Dashboard:** `report.html` (View in browser)
+- **SARIF v2.1.0 Export:** `.torusguard/runs/results-latest.sarif` (Ready for CI)
+- **Living Ledger:** `security_report.md` (Synchronized in lockstep)
 ```
 
 ## Living Report Ground Truth

package/skills/torusguard-status/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: torusguard-status
 description: Display current TorusGuard security posture, active configuration, rules catalog, and run history via CLI or AI Agent.
-version: 1.3.5
+version: 1.3.6
 workflow: .torusguard/workflows/status.md
 tools: Read, Grep, Glob, run_command, Write
 scripts-binding:

package/skills/torusguard-verify/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: torusguard-verify
 description: Verify finding evidence sufficiency, audit live code line matches, and calibrate 0–100 confidence scores.
-version: 1.3.5
+version: 1.3.6
 workflow: .torusguard/workflows/verify.md
 tools: Read, Grep, Glob, Write, run_command
 scripts-binding:

package/skills/torusguard-web-validate/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: torusguard-web-validate
 description: Execute authorized HTTP probing against local/staging web applications — session capture, transparent audit headers, and secret redaction.
-version: 1.3.5
+version: 1.3.6
 workflow: .torusguard/workflows/web-validate.md
 tools: Read, Grep, Glob, Bash, Write, run_command
 scripts-binding: