torusguard 1.4.0 → 2.1.0

package/skills/torusguard/payload/workflows/authorize.md

@@ -1,14 +1,14 @@
 ---
 description: Legal scope definition, target ownership proof verification, and safety boundary enforcement for runtime validation.
-tools: Read, Grep, Glob, Bash, Write
-version: 1.3.6
+tools: Read, Grep, Glob, Bash, Write, run_command
+version: 2.0.0
 agent: reviewer
 lifecycle-phase: Phase 1 (Authorization Gate)
 required-skills:
   - torusguard-authorize
 scripts-binding:
-  - .torusguard/scripts/report_sync.py
-  - .torusguard/scripts/safety_gate.py
+  - internal/validate/validate.go
+  - cmd/torusguard/main.go
 ---
 
 # /torusguard authorize — Legal Scope & Safety Gate
@@ -18,7 +18,17 @@ $ARGUMENTS
 ---
 
 ## Objective
-Legal scope definition, target ownership proof verification, and safety boundary enforcement.
+Legal scope definition, target ownership proof verification, and safety boundary enforcement for runtime validation.
+
+---
+
+## Tri-Mode Execution
+
+| Mode | Command / Tool | Execution Method |
+| :--- | :--- | :--- |
+| **Mode A: Terminal CLI** | `torusguard authorize` | Interactive boundary setup and cryptographic token generation. |
+| **Mode B: AI Chat Slash** | `/torusguard authorize` | Conversational parameter collection and scope validation. |
+| **Mode C: Native MCP Tool** | Safety Gate Guard | Administrative gatekeeper ensuring strict safety boundaries before probes. |
 
 ---
 
@@ -27,52 +37,20 @@ Legal scope definition, target ownership proof verification, and safety boundary
 Inspect authorization parameters and environment safety before executing:
 1. **Config Record (`.torusguard/config/torusguard.json`):** Assert repository is initialized.
 2. **Current Scope (`.torusguard/config/scope.json`):** Inspect active allowed targets, paths, and TTL expiry.
-3. **Environment Classification:** Assert target is local or staging (`localhost`, `127.0.0.1`, `*.local`, `*.staging.*`). Production targets require explicit approval.
+3. **Environment Classification:** Assert target is local or staging (`localhost`, `127.0.0.1`, `*.staging.*`).
 4. **Destructive Guard:** Ensure state-changing operations (`DELETE`, bulk drops) remain blocked by default.
-5. **Ownership Proof:** Verify target ownership token or local process binding.
-6. **TTL Window:** Ensure authorization window does not exceed 24 hours.
-
----
-
-## When to Use /torusguard authorize
-
-| Trigger Scenario | Recommended Action |
-| :--- | :--- |
-| Preparing for live HTTP probes or API validation | Run `/torusguard authorize` |
-| Updating allowed hosts, path prefixes, or rate limits | Run `/torusguard authorize` |
-| Static-only security audit | Skip authorize; run `/torusguard audit` |
-| Checking active legal scope status | Run `/torusguard status` |
-| Expired authorization window | Re-run `/torusguard authorize` |
+5. **TTL Window:** Ensure authorization window does not exceed 24 hours.
 
 ---
 
 ## Execution Steps
 
-1. **Capture Scope Parameters:** Collect target URL, allowed paths, forbidden prefixes, and max request budget.
-2. **Validate Host Ownership:** Verify target is local or matches authorized test domains.
-3. **Invoke Safety Gate:**
-   ```bash
-   python .torusguard/scripts/safety_gate.py check --url <target_url>
-   ```
-4. **Write Scope File (`.torusguard/config/scope.json`):** Save authorized targets, valid TTL timestamp, and request rate caps.
-5. **Confirm Scope Binding:** Verify `.torusguard/config/scope.json` parses as valid JSON against schema.
-
----
-
-## Failure Recovery
-
-- **Unreachable Host:** Verify local server is running on the specified port.
-- **Production Target Warning:** If target resolves to an external production host, halt and request operator override.
-- **Malformed JSON:** Re-initialize `scope.json` from `.torusguard/schemas/auth-boundary.schema.json`.
-- **Halt Trigger:** Abort immediately if user provides wildcard target (`*`) or third-party domain.
-
----
-
-## Hallucination Guard
-
-- ❌ Never proceed with runtime probing without an explicit, valid `.torusguard/config/scope.json`.
-- ❌ Never authorize destructive HTTP methods (`DELETE`, `DROP`) under default non-destructive policy.
-- ✅ Always validate targets through `.torusguard/scripts/safety_gate.py`.
+1. **Trigger Authorization:**
+   - **Mode A (CLI):** Run `torusguard authorize`.
+   - **Mode B (Chat):** Collect target host URL and allowed prefixes.
+2. **Generate Token:** Persist cryptographic authorization token into `.torusguard/auth.json`.
+3. **Write Scope Record:** Persist authorized targets and expiration TTL into `.torusguard/config/scope.json`.
+4. **Confirm Readiness:** Prepare environment for `/torusguard web-validate`.
 
 ---
 
@@ -81,9 +59,8 @@ Inspect authorization parameters and environment safety before executing:
 ```markdown
 ### 🔒 TorusGuard Authorization Gate
 - **Target URL:** [Target Host or URL]
-- **Environment:** [Localhost / Staging / Container]
-- **Allowed Paths:** [Path prefixes or all authorized]
-- **Rate Limit:** [Max requests / concurrency limit]
+- **Environment:** [Localhost / Staging]
+- **Session TTL:** 24 Hours
 - **Scope File:** `.torusguard/config/scope.json`
 - **Status:** AUTHORIZED — ready for `/torusguard web-validate`
 ```
@@ -92,5 +69,5 @@ Inspect authorization parameters and environment safety before executing:
 
 ## Next Steps
 
-1. Run `/torusguard audit` to scan codebase for AST security vulnerabilities.
-2. Run `/torusguard web-validate` to begin safe, authorized endpoint validation.
+1. Run `/torusguard web-validate` to begin safe, authorized endpoint validation.
+2. Run `/torusguard audit` to scan codebase for AST vulnerabilities.

package/skills/torusguard/payload/workflows/container.md

@@ -0,0 +1,29 @@
+# /torusguard-container — Container & Docker Security Audit
+
+$ARGUMENTS
+
+---
+
+## Objective
+Detect and remediate container privilege escalation, root execution, docker socket exposure, and build-time secret injection across `Dockerfile`, `Containerfile`, and `docker-compose.yml` configurations.
+
+---
+
+## Tri-Mode Parity
+- **Mode A (Terminal CLI):** `torusguard container [target]`
+- **Mode B (AI Chat Slash Command):** `/torusguard container [target]`
+- **Mode C (Native MCP Tool):** `torusguard_container`
+
+---
+
+## Execution Steps
+
+1. **Discover Container Configurations:** Discover all Dockerfiles and compose YAML files in the workspace.
+2. **Execute Static Heuristic Audit:** Run `ScanContainerFiles` or `torusguard_container` against discovered files.
+3. **Assert Security Invariants:**
+   - Enforce non-root user declarations (`TG-CONT-001`).
+   - Block Docker daemon socket mounts (`/var/run/docker.sock`) (`TG-CONT-002`).
+   - Disallow `privileged: true` and unconfined seccomp profiles (`TG-CONT-003`).
+   - Ban build-time secrets in `ARG` or `ENV` directives (`TG-CONT-004`).
+4. **Formulate Surgical Patches:** Propose minimal diffs adding non-root users (`USER appuser`) and secret mounts within Ponytail bounds (≤35 additions, ≤25 deletions).
+5. **Synchronize Report:** Log all container findings in `security_report.md`.

package/skills/torusguard/payload/workflows/exploit-check.md

@@ -1,15 +1,14 @@
 ---
 description: Safe, bounded, single-step exploitability confirmation across 5 standard verification statuses.
-tools: Read, Grep, Glob, Bash, Write
-version: 1.3.6
+tools: Read, Grep, Glob, Bash, Write, run_command
+version: 2.0.0
 agent: validator
 lifecycle-phase: Phase 3c (Exploitability Check)
 required-skills:
   - torusguard-exploit-check
 scripts-binding:
-  - .torusguard/scripts/report_sync.py
-  - .torusguard/scripts/safety_gate.py
-  - .torusguard/scripts/finding_scorer.py
+  - internal/validate/validate.go
+  - cmd/torusguard/main.go
 ---
 
 # /torusguard exploit-check — Bounded Exploitability Confirmation
@@ -19,62 +18,43 @@ $ARGUMENTS
 ---
 
 ## Objective
-Safe, bounded, single-step exploitability confirmation across 5 standard verification statuses.
+Safe, bounded, single-step exploitability confirmation using inert canary tokens without data loss or weaponized execution.
 
 ---
 
-## Mandatory Pre-Flight Context Inspection
+## Tri-Mode Execution
 
-Inspect authorization parameters and probe safety constraints:
-1. **Scope Check (`scope.json`):** Assert endpoint is authorized.
-2. **Approved Probes:** Use benign canaries (SQLi math, HTML marker, unauth read).
-3. **Destructive Ban:** Strictly prohibit drops, DOS, or weaponized payloads.
-4. **Safety Gate:** Verify probe with `safety_gate.py` prior to dispatch.
-5. **Bound:** Limit to single non-destructive HTTP request per finding.
-6. **Audit Trail:** Inject `X-TorusGuard-AuthID` header on all outbound requests.
+| Mode | Command / Tool | Execution Method |
+| :--- | :--- | :--- |
+| **Mode A: Terminal CLI** | `torusguard exploit-check [--url <url>] [--finding <id>]` | Terminal execution of sentinel canary prober. |
+| **Mode B: AI Chat Slash** | `/torusguard exploit-check` | Conversational exploitability triage and status classification. |
+| **Mode C: Native MCP Tool** | Bounded Probe Engine | Safe probe execution guarded by inert tokens and safety gate. |
 
 ---
 
-## When to Use /torusguard exploit-check
+## Mandatory Pre-Flight Context Inspection
 
-| Trigger Scenario | Recommended Action |
-| :--- | :--- |
-| Confirming whether a flaw is practically exploitable | Run `/torusguard exploit-check` |
-| Upgrading Medium confidence finding to Confirmed | Run `/torusguard exploit-check` |
-| Verifying IDOR or tenant isolation boundaries | Run `/torusguard exploit-check` |
-| Routine endpoint header inspection | Run `/torusguard web-validate` |
-| Applying approved remediation patch | Run `/torusguard apply` |
+Inspect authorization parameters and probe safety constraints:
+1. **Scope Check (`scope.json`):** Assert endpoint is authorized.
+2. **Approved Probes:** Use benign canaries (SQLi math identity `' OR 1=1--`, HTML marker `<tg-canary-tag>`).
+3. **Destructive Ban:** Strictly prohibit drops, DOS, or weaponized payloads.
+4. **Bound:** Limit to single non-destructive HTTP request per finding.
+5. **Audit Trail:** Inject `X-TorusGuard-AuthID` header on all outbound requests.
 
 ---
 
 ## Execution Steps
 
-1. **Verify Authorization Scope:** Confirm target host and route in `scope.json`.
-2. **Select Safe Canary:** Choose inert mathematical sentinel or unauth GET.
-3. **Validate With Safety Gate:**
-   ```bash
-   python .torusguard/scripts/safety_gate.py check --url <target_url> --payload <canary>
-   ```
-4. **Dispatch Bounded Single Probe:** Send request with header `X-TorusGuard-AuthID`.
-5. **Classify Status:** Evaluate response against 5 outcomes: `Confirmed`, `Needs Review`, `Not Reproducible`, `Blocked by Controls`, `Out of Scope`.
-6. **Emit Artifacts:** Write `exploit-check.md` and update `findings.json`.
-
----
-
-## Failure Recovery
-
-- **Connection Refused:** Verify target server is running locally on port.
-- **Safety Gate Block:** If `Manual Only`, halt automated probe and request human review.
-- **Ambiguous Response:** Mark finding as `Needs Review`; never assume exploit without proof.
-- **Halt Trigger:** Abort if probe causes server 500 error or unexpected crash.
-
----
-
-## Hallucination Guard
-
-- ❌ Never classify a vulnerability as `Confirmed` without direct sentinel reflection.
-- ❌ Never execute brute force attacks or automated password spraying.
-- ✅ Always provide reproducible curl commands with redacted credentials.
+1. **Trigger Exploit Check:**
+   - **Mode A (CLI):** Run `torusguard exploit-check --url http://localhost:3000 --finding TG-SEC-001`.
+   - **Mode B (Chat):** Review response to inert canary probe.
+2. **Classify Status:** Evaluate response against 5 canonical outcomes:
+   - `Confirmed`: Canary reflected or secondary tenant data leaked.
+   - `Not Reproducible`: Endpoint responded with 401/403 or sanitized input.
+   - `Needs Review`: Ambiguous status code or incomplete response.
+   - `Blocked by Controls`: WAF or rate limiter stopped probe.
+   - `Out of Scope`: Target endpoint is not authorized.
+3. **Update Living Report:** Record outcome in `security_report.md`.
 
 ---
 
@@ -84,10 +64,8 @@ Inspect authorization parameters and probe safety constraints:
 ### 🎯 TorusGuard Exploitability Confirmation
 - **Target Route:** `[METHOD] /path`
 - **Finding ID:** `TG-XXX-HASH`
-- **Canary Used:** [Inert Math Sentinel / Unauth Read]
 - **Status:** [Confirmed / Not Reproducible / Blocked]
 - **Evidence:** [Response snippet demonstrating leak or block]
-- **Replay Curl:** `curl -X [METHOD] http://localhost:PORT/path ...`
 ```
 
 ---

package/skills/torusguard/payload/workflows/git-mine.md

@@ -0,0 +1,25 @@
+# /torusguard-git-mine — Git Repository & History Secret Mining
+
+$ARGUMENTS
+
+---
+
+## Objective
+Inspect local Git metadata, `.git/config` remotes, and historical commit logs to uncover leaked API tokens, private certificates, and sensitive credentials committed in previous revisions.
+
+---
+
+## Tri-Mode Parity
+- **Mode A (Terminal CLI):** `torusguard git-mine [target]`
+- **Mode B (AI Chat Slash Command):** `/torusguard git-mine [target]`
+- **Mode C (Native MCP Tool):** `torusguard_git_mine`
+
+---
+
+## Execution Steps
+
+1. **Verify Git Environment:** Verify target directory is a valid Git repository containing `.git/`.
+2. **Audit Remote Configurations:** Check `.git/config` for embedded basic auth credentials in remote origin URLs (`TG-GIT-002`).
+3. **Mine Commit Log Diffs:** Inspect the last 50 commits (`git log -p`) for added tokens, keys, and credentials (`TG-GIT-001`).
+4. **Audit Tracked Sensitive Files:** Ensure `.env`, private keys, and certificates are not tracked in git tree history (`TG-GIT-003`).
+5. **Report & Revoke:** Provide immediate provider revocation steps and commit log cleanup guidance in `security_report.md`.

package/skills/torusguard/payload/workflows/harden.md

@@ -1,16 +1,16 @@
 ---
 description: Governed remediation formulation under strict Ponytail Protocol bounds (<= 35 additions, <= 25 deletions) and bundle packaging.
-tools: Read, Grep, Glob, Bash, Write
-version: 1.4.0
+tools: Read, Grep, Glob, Bash, Write, run_command
+version: 2.0.0
 agent: remediator
 lifecycle-phase: Phase 4 (Remediation Formulation)
 required-skills:
   - torusguard-harden
 scripts-binding:
-  - .torusguard/scripts/harden_runner.py
-  - .torusguard/scripts/report_sync.py
-  - .torusguard/scripts/run_manager.py
-  - .torusguard/scripts/diff_guard.py
+  - internal/harden/patch.go
+  - internal/harden/reflection.go
+  - cmd/torusguard/main.go
+  - cmd/torusguard/mcp.go
 ---
 
 # /torusguard harden — Governed Remediation & Bundle Packaging
@@ -20,36 +20,29 @@ $ARGUMENTS
 ---
 
 ## Objective
-Governed remediation formulation under strict Ponytail Protocol bounds (<=35 add, <=25 del).
+Formulate minimal, surgical code fixes bound by the Ponytail Protocol ($\le 35$ additions, $\le 25$ deletions), packaging unified diffs or semantic reflection patches into auditable remediation bundles ready for review.
 
-Supported CLI flags:
-- `npx torusguard harden [--target <dir>]` : Specify project root directory
-- `npx torusguard harden --dry-run` : Preview candidate patches without modifying disk files
-- `npx torusguard harden --severity <critical|high|medium|low>` : Filter findings by minimum severity floor
+---
+
+## Tri-Mode Execution
+
+| Mode | Command / Tool | Execution Method |
+| :--- | :--- | :--- |
+| **Mode A: Terminal CLI** | `torusguard harden <candidate.patch \| patch.json>` | Shell validation of patch against Ponytail bounds. |
+| **Mode B: AI Chat Slash** | `/torusguard harden` | Formulate semantic patch with Line-Level Reflection. |
+| **Mode C: Native MCP Tool** | `torusguard_harden` | Automated validation of patch file or `find_snippet` / `replace_snippet`. |
 
 ---
 
 ## Mandatory Pre-Flight Context Inspection
 
 Inspect finding targets and patch constraints before generating diffs:
-1. **Target Finding (`findings.md`):** Identify prioritized verified findings.
+1. **Target Finding (`security_report.md`):** Identify prioritized verified findings.
 2. **Ponytail Protocol:** Enforce hard limit ($\le 35$ additions, $\le 25$ deletions). Ban rewrites.
-3. **Sensitive Path Review:** Flag changes touching `auth/` or `settings.py` for human sign-off.
+3. **Sensitive Path Review:** Flag changes touching `auth/` or credentials for explicit sign-off.
 4. **Behavior Preservation:** Ensure patch addresses flaw without breaking public APIs.
 5. **Dry-Run Rule:** Do NOT apply changes to disk during harden; emit bundle for review.
-6. **Backup Readiness:** Ensure rollback procedures are prepared before staging patch.
-
----
-
-## When to Use /torusguard harden
-
-| Trigger Scenario | Recommended Action |
-| :--- | :--- |
-| Formulating minimal patches for verified findings | Run `/torusguard harden` |
-| Packaging a 4-artifact remediation bundle for review | Run `/torusguard harden` |
-| Writing and applying changes to code files | Run `/torusguard apply` |
-| Differentially re-scanning code after patch application | Run `/torusguard recheck` |
-| Discovering new vulnerabilities | Run `/torusguard audit` |
+6. **Zero Bypasses:** Reject `# nosec`, `verify=False`, or `InsecureSkipVerify` under rule `TG-DIFF-001`.
 
 ---
 
@@ -57,30 +50,15 @@ Inspect finding targets and patch constraints before generating diffs:
 - Candidate patches transition findings in `security_report.md` into `CANDIDATE 🟡` status.
 - Every patch strictly conforms to Ponytail bounds (<= 35 additions, <= 25 deletions).
 
-## Execution Steps
-
-1. **Select Target Finding:** Choose verified flaw from active run directory.
-2. **Examine Live Code Context:** Read surrounding lines (±15) of vulnerable sink.
-3. **Draft Unified Diff:** Formulate minimal fix adhering to Ponytail Protocol limits.
-4. **Audit Patch Safety:** Run `python .torusguard/scripts/diff_guard.py <patch.diff>`.
-5. **Package 4-Artifact Bundle:** Write `patch.diff`, `plan.md`, `verification.md`, `rollback.md` to `.torusguard/runs/<run_id>/remediation/<finding_id>/`.
-
 ---
 
-## Failure Recovery
-
-- **Line Churn Exceeded (>35 add or >25 del):** Decompose patch into smaller sequential sub-fixes.
-- **Sensitive Path Conflict:** Mark bundle with `Requires Sensitive-Path Sign-Off` in `plan.md`.
-- **Finding Not Found:** Ensure finding ID exists in active `findings.md`.
-- **Halt Trigger:** Abort if target source file cannot be read from disk.
-
----
-
-## Hallucination Guard
+## Execution Steps
 
-- ❌ Never generate full-file replacements or unconstrained cosmetic code refactoring.
-- ❌ Never modify imports, variables, or functions unrelated to the vulnerability.
-- ✅ Always calculate addition and deletion line counts before emitting `patch.diff`.
+1. **Select Target Finding:** Choose verified flaw from `security_report.md`.
+2. **Examine Live Code Context:** Read surrounding lines ($\pm 3$) using bounded context extraction.
+3. **Formulate Minimal Semantic Patch:** Formulate `find_snippet` and `replace_snippet`.
+4. **Audit Patch Safety:** Run `torusguard harden` or call `torusguard_harden`.
+5. **Package Bundle:** Prepare candidate patch ready for the Human Gate.
 
 ---
 
@@ -89,10 +67,8 @@ Inspect finding targets and patch constraints before generating diffs:
 ```markdown
 ### 🛠️ TorusGuard Remediation Bundle
 - **Finding Target:** `TG-XXX-HASH` ([Vulnerability Name])
-- **File Affected:** `src/path/to/file.py`
+- **File Affected:** `src/path/to/file`
 - **Line Churn:** +[Additions] / -[Deletions] (Ponytail: PASS)
-- **Sensitive Path:** [Yes (Sign-Off Needed) / No (Standard)]
-- **Bundle Path:** `.torusguard/runs/<run_id>/remediation/<finding_id>/`
 - **Status:** READY FOR REVIEW — run `/torusguard apply` to execute
 ```
 
@@ -100,5 +76,5 @@ Inspect finding targets and patch constraints before generating diffs:
 
 ## Next Steps
 
-1. Review proposed diff in `.torusguard/runs/<run_id>/remediation/<finding_id>/patch.diff`.
-2. Run `/torusguard apply` to execute the governed patch with automatic rollback backup.
+1. Review proposed diff or semantic reflection snippet.
+2. Run `/torusguard apply` or `torusguard apply` with Human Gate approval.

package/skills/torusguard/payload/workflows/init.md

@@ -1,14 +1,15 @@
 ---
 description: Baseline project discovery, workspace scaffolding, stack detection, and framework-tailored security rule activation.
-tools: Read, Grep, Glob, Bash, Write
-version: 1.4.0
+tools: Read, Grep, Glob, Bash, Write, run_command
+version: 2.0.0
 agent: profiler
 lifecycle-phase: Phase 0 (Baseline Setup)
 required-skills:
   - torusguard-init
 scripts-binding:
-  - .torusguard/scripts/report_sync.py
-  - .torusguard/scripts/stack_detect.py
+  - internal/workspace/workspace.go
+  - cmd/torusguard/main.go
+  - cmd/torusguard/mcp.go
 ---
 
 # /torusguard init — Project Baseline & Workspace Initialization
@@ -18,71 +19,42 @@ $ARGUMENTS
 ---
 
 ## Objective
-Baseline project discovery, workspace scaffolding, stack detection, and security rule activation.
-
-Supported CLI flags:
-- `npx torusguard init [--target <dir>]` : Scaffold workspace into specified root directory
-- `npx torusguard init --template <golang|nextjs|fastapi|express|django|react>` : Guide stack configuration explicitly
-- `npx torusguard init --audit` : Run immediate baseline audit post-initialization
-- `npx torusguard init --force` : Force overwrite existing workspace and re-scaffold baseline
+Baseline project discovery, workspace scaffolding across polyglot stacks, and activation of 74 canonical security rules across 18 families.
 
 ---
 
-## Mandatory Pre-Flight Context Inspection
+## Tri-Mode Execution
 
-Inspect workspace state before running initialization:
-1. **Config State (`.torusguard/config/torusguard.json`):** Check if workspace is already initialized. If active, prompt before re-writing.
-2. **Project Manifests:** Check root for `package.json`, `manage.py`, `requirements.txt`, `pyproject.toml`, `go.mod`, or `Cargo.toml`.
-3. **Disclosure Policy (`SECURITY.md`):** Check for existing responsible disclosure policy.
-4. **Bootstrapper:** If `.torusguard/` is absent, invoke `python skills/torusguard/bootstrap.py` to unpack offline assets.
-5. **Runtime Preconditions:** Ensure Python 3.10+ is available in the current execution shell.
+| Mode | Command / Tool | Execution Method |
+| :--- | :--- | :--- |
+| **Mode A: Terminal CLI** | `torusguard init [--force] [--stack <name>]` | Terminal execution of workspace scaffolder. |
+| **Mode B: AI Chat Slash** | `/torusguard init` | Conversational stack profiling and rule activation. |
+| **Mode C: Native MCP Tool** | Administrative Command | Agents execute `torusguard init` via shell and monitor via `torusguard_status`. |
 
 ---
 
-## When to Use /torusguard init
+## Mandatory Pre-Flight Context Inspection
 
-| Trigger Scenario | Recommended Command |
-| :--- | :--- |
-| First-time onboarding in any repository | Run `/torusguard init` |
-| Framework upgrade or major dependency changes | Run `/torusguard init` to refresh tailored rules |
-| Repository already configured | Run `/torusguard audit` |
-| Inspecting existing configuration | Run `/torusguard status` |
-| Testing legal boundaries | Run `/torusguard authorize` |
+Inspect workspace state before running initialization:
+1. **Config State (`.torusguard/config/torusguard.json`):** Check if workspace is already initialized.
+2. **Project Manifests:** Check root for `package.json`, `go.mod`, `Cargo.toml`, `requirements.txt`, `pyproject.toml`.
+3. **Disclosure Policy (`SECURITY.md`):** Check for existing responsible disclosure policy.
 
 ---
 
 ## Living Report Invariant
-- Provisions baseline `security_report.md` single-source-of-truth ledger.
+- Provisions baseline `SECURITY.md` responsible disclosure policy.
 - Activates tailored rules across 18 families based on detected stack.
 
-## Execution Steps
-
-1. **Scaffold Directory Topology:** Verify `.torusguard/` structure (`config/`, `rules/active/`, `runs/`, `scripts/`, `workflows/`, `templates/`, `schemas/`).
-2. **Execute Stack Detection:**
-   ```bash
-   python .torusguard/scripts/stack_detect.py .
-   ```
-3. **Activate Tailored Rules:** Symlink or copy matching security rules from `.torusguard/rules/` into `.torusguard/rules/active/`.
-4. **Write Configuration (`.torusguard/config/torusguard.json`):**
-   Record detected stack, enabled rules count, timestamp, and runtime constraints.
-5. **Verify Initialization:** Assert `.torusguard/config/torusguard.json` and `.torusguard/config/scope.json` exist.
-
 ---
 
-## Failure Recovery
-
-- **Script Exit 1 (Detection Failed):** Check Python version (`python --version` >= 3.10) and verify read access to root manifests.
-- **Permission Error:** Verify write permissions for `.torusguard/config/` and `.torusguard/rules/active/`.
-- **Missing Directories:** Re-run directory scaffolding if any subfolder creation fails.
-- **Halt Condition:** If root directory is empty, halt and prompt user to open the project root.
-
----
-
-## Hallucination Guard
+## Execution Steps
 
-- ❌ Never invent framework dependencies not present in `package.json` or `requirements.txt`.
-- ❌ Never overwrite an existing `.torusguard/config/scope.json` containing authorized domains.
-- ✅ Always execute `.torusguard/scripts/stack_detect.py` to ground detected technologies.
+1. **Scaffold Directory Topology:** Create `.torusguard/` structure (`config/`, `rules/active/`, `runs/`, `snapshots/`, `memory/`).
+2. **Detect Stack:** Automatically identify frameworks across 16+ polyglot languages.
+3. **Persist Configuration:** Write `.torusguard/config/torusguard.json`.
+4. **Provision Policy:** Generate baseline `SECURITY.md` at workspace root.
+5. **Recommend Audit:** Direct user to `/torusguard audit` or `torusguard audit`.
 
 ---
 
@@ -90,11 +62,10 @@ Inspect workspace state before running initialization:
 
 ```markdown
 ### 🛡️ TorusGuard Workspace Initialization
-- **Primary Framework:** [Detected Stack or None]
-- **Components:** [Backend / Frontend / Database]
-- **Active Rules:** [Count] rules enabled in `.torusguard/rules/active/`
+- **Primary Framework:** [Detected Stack]
+- **Active Rules:** 74 rules enabled across 18 families
 - **Config:** `.torusguard/config/torusguard.json` generated
-- **Scope Template:** `.torusguard/config/scope.json` ready
+- **Policy:** `SECURITY.md` provisioned
 - **Status:** READY — run `/torusguard audit` to scan codebase
 ```
 

package/skills/torusguard/payload/workflows/memory.md

@@ -1,14 +1,15 @@
 ---
 description: TorusGuard Adaptive Security Memory Engine — view memory stats, export/import intelligence, apply TTL decay, and manage false positives.
-tools: Read, Grep, Glob, Bash
-version: 1.3.6
+tools: Read, Grep, Glob, Bash, Write, run_command
+version: 2.0.0
 agent: reviewer
 lifecycle-phase: Intelligence / Memory
 required-skills:
   - torusguard
 scripts-binding:
-  - .torusguard/scripts/report_sync.py
-  - .torusguard/scripts/memory_engine.py
+  - internal/memory/recipes.go
+  - cmd/torusguard/main.go
+  - cmd/torusguard/mcp.go
 ---
 
 # /torusguard memory — Adaptive Security Memory Engine & Intelligence Management
@@ -18,37 +19,31 @@ $ARGUMENTS
 ---
 
 ## Objective
-Inspect, manage, export, import, or compact persistent local security memory patterns, context window cards, and false positive suppressions.
+Inspect, manage, export, import, or compact persistent local security memory patterns, context window cards, and Golden Fix Recipes.
 
 ---
 
-## Subcommands & Usage
+## Tri-Mode Execution
 
-| Command | Action | Description |
+| Mode | Command / Tool | Execution Method |
 | :--- | :--- | :--- |
-| `npx torusguard memory` | Status | Display memory stats, pattern count, and context token estimate |
-| `npx torusguard memory context` | Context Dump | Output the active pre-computed context window cards |
-| `npx torusguard memory fp --rule <RULE_ID>` | False Positive | Suppress rule as false positive across future scans |
-| `npx torusguard memory decay [--ttl 90]` | TTL Decay | Apply confidence decay to stale, unconfirmed patterns |
-| `npx torusguard memory export --path <FILE>` | Export | Export memory bundle for team sharing |
-| `npx torusguard memory import --path <FILE>` | Import | Merge external memory bundle into local project intelligence |
-| `npx torusguard memory compact` | Compaction | Archive raw events older than 30 days into single archive |
+| **Mode A: Terminal CLI** | `torusguard recipes [list \| show \| export]` | Terminal management of Golden Fix Recipes. |
+| **Mode B: AI Chat Slash** | `/torusguard recipes` | Interactive exploration of verified remediation patterns. |
+| **Mode C: Native MCP Tool** | `torusguard://rules_catalog` | Programmatic access to catalog rules and distilled patterns. |
 
 ---
 
-## Execution Steps
+## Subcommands & Usage
 
-1. **Verify Memory Subsystem:** Confirm `.torusguard/memory/` exists and is shielded by `.gitignore`.
-2. **Execute Requested Action:** Invoke `.torusguard/scripts/memory_engine.py` with appropriate action flag:
-   ```bash
-   python .torusguard/scripts/memory_engine.py --action status
-   ```
-3. **Verify Context Token Budget:** Confirm `context.json` remains within token budget ($\le 2,000$ tokens).
-4. **Display Intelligence Card:** Render summary card to user.
+| Command | Action | Description |
+| :--- | :--- | :--- |
+| `torusguard recipes` | List | Display Golden Fix recipes library |
+| `torusguard recipes list` | Catalog | Enumerate verified fix patterns |
+| `torusguard recipes export` | Export | Export memory bundle for team sharing |
 
 ---
 
 ## Privacy & Security Invariants
 - Memory files remain strictly local under `.torusguard/memory/` and are always gitignored.
-- Memory files are never packaged into npm release tarballs.
+- Memory files are never packaged into release tarballs.
 - Export operations only occur when explicitly invoked by user command.