torusguard 2.0.0-alpha → 2.1.0

package/.torusguard/workflows/status.md

@@ -1,14 +1,15 @@
 ---
 description: Read-only diagnostic overview of workspace security posture, active configuration, rules catalog, and run history.
-tools: Read, Grep, Glob, Bash
-version: 1.3.6
+tools: Read, Grep, Glob, Bash, Write, run_command
+version: 2.0.0
 agent: reviewer
 lifecycle-phase: System / Diagnostics
 required-skills:
   - torusguard-status
 scripts-binding:
-  - .torusguard/scripts/report_sync.py
-  - .torusguard/scripts/run_manager.py
+  - cmd/torusguard/main.go
+  - cmd/torusguard/mcp.go
+  - internal/workspace/workspace.go
 ---
 
 # /torusguard status — Workspace Security Posture & Diagnostic Overview
@@ -18,30 +19,27 @@ $ARGUMENTS
 ---
 
 ## Objective
-Read-only diagnostic overview of workspace security posture, active configuration, and run history.
+Read-only diagnostic overview of workspace security posture, active configuration, and run history across 74 canonical security rules and 18 families.
 
 ---
 
-## Mandatory Pre-Flight Context Inspection
+## Tri-Mode Execution
 
-Inspect workspace state and configuration records prior to status display:
-1. **Config State (`.torusguard/config/torusguard.json`):** Confirm workspace initialization and read detected stack.
-2. **Active Rules Directory (`.torusguard/rules/active/`):** Count active rule files.
-3. **Run Folder Ledger (`.torusguard/runs/`):** Check run history and locate latest `manifest.json`.
-4. **Scope Record (`.torusguard/config/scope.json`):** Check whether runtime authorization TTL is active or expired.
-5. **Read-Only Invariant:** Ensure command performs zero file modifications or disk mutations.
+| Mode | Command / Tool | Execution Method |
+| :--- | :--- | :--- |
+| **Mode A: Terminal CLI** | `torusguard status [--json]` | Terminal execution of 75-column diagnostic cards. |
+| **Mode B: AI Chat Slash** | `/torusguard status` | Conversational diagnostic inspection of active config and ledger. |
+| **Mode C: Native MCP Tool** | `torusguard_status` | Agent tool call with `{"target": "."}` returning posture JSON/string. |
 
 ---
 
-## When to Use /torusguard status
+## Mandatory Pre-Flight Context Inspection
 
-| Trigger Scenario | Recommended Action |
-| :--- | :--- |
-| Checking workspace configuration and active security posture | Run `/torusguard status` |
-| Reviewing recent audit runs and finding counts | Run `/torusguard status` |
-| Checking active legal scope authorization TTL | Run `/torusguard status` |
-| Initializing workspace for the first time | Run `/torusguard init` |
-| Executing full security scan | Run `/torusguard audit` |
+Inspect workspace state and configuration records prior to status display:
+1. **Config State (`.torusguard/config/torusguard.json`):** Confirm workspace initialization and read detected stack.
+2. **Active Rules Directory (`.torusguard/rules/active/`):** Count active rule files (74 canonical rules).
+3. **Living Report (`security_report.md`):** Read current open vs resolved findings.
+4. **Read-Only Invariant:** Ensure command performs zero file modifications or disk mutations.
 
 ---
 
@@ -49,33 +47,16 @@ Inspect workspace state and configuration records prior to status display:
 - Reads current health score and status breakdown directly from `security_report.md`.
 - Displays 18 rule families and 74 rules in standardized 75-column terminal cards.
 
-## Execution Steps
-
-1. **Read Configuration:** Load `.torusguard/config/torusguard.json`; extract stack, version, and enabled rule count.
-2. **Enumerate Active Rules:** Count rule files physically present in `.torusguard/rules/active/`.
-3. **Inspect Run History:**
-   ```bash
-   python .torusguard/scripts/run_manager.py list
-   ```
-4. **Evaluate Scope Expiry:** Parse `.torusguard/config/scope.json`; report if TTL is valid or expired.
-5. **Print Status Overview:** Render complete workspace diagnostic overview card.
-
 ---
 
-## Failure Recovery
-
-- **Uninitialized Workspace:** If config is missing, prompt user to execute `/torusguard init`.
-- **Zero Runs Found:** Display clean status card noting no historical audit runs exist yet.
-- **Corrupt Config File:** Report parsing error and recommend re-running `/torusguard init`.
-- **Halt Trigger:** Abort command if read access to `.torusguard/` is denied.
-
----
-
-## Hallucination Guard
+## Execution Steps
 
-- ❌ Never display fabricated finding counts not substantiated by run manifests.
-- ❌ Never execute modifying shell commands or edit source code during status inspection.
-- ✅ Always report factual file counts from `.torusguard/rules/active/` and `.torusguard/runs/`.
+1. **Trigger Status Check:**
+   - **Mode A (CLI):** Run `torusguard status`.
+   - **Mode B (Chat):** Read `torusguard.json` and `security_report.md`.
+   - **Mode C (MCP):** Call `torusguard_status`.
+2. **Evaluate Posture:** Report detected stack, active invariants, and living findings ledger.
+3. **Recommend Next Actions:** Direct user to audit or remediation as needed.
 
 ---
 
@@ -83,13 +64,11 @@ Inspect workspace state and configuration records prior to status display:
 
 ```markdown
 ### 🛡️ TorusGuard Workspace Status
-- **Version:** v0.9.2
-- **Framework Detected:** [Stack or None]
-- **Active Rules:** [Count] rules active in `.torusguard/rules/active/`
-- **Total Runs:** [Count] historical runs recorded
-- **Latest Run:** `run-YYYYMMDD-HHMMSS` ([Findings Count] findings)
-- **Scope Status:** [Authorized (TTL Active) / Expired / Unconfigured]
-- **Health Posture:** [GOOD / ACTION NEEDED]
+- **Version:** v2.0.0
+- **Framework Detected:** [Stack]
+- **Active Rules:** 74 canonical rules active across 18 families
+- **Living Report:** `security_report.md`
+- **Health Posture:** [OPTIMAL DEFENSE / ACTION NEEDED]
 ```
 
 ---
@@ -97,4 +76,4 @@ Inspect workspace state and configuration records prior to status display:
 ## Next Steps
 
 1. Run `/torusguard audit` to scan codebase for security vulnerabilities.
-2. Run `/torusguard authorize` to configure or refresh live target scope.
+2. Run `/torusguard report --html` to view interactive dashboard.

package/.torusguard/workflows/verify.md

@@ -1,14 +1,15 @@
 ---
 description: Evidence sufficiency verification, live disk line match audit, and finding score refinement.
-tools: Read, Grep, Glob, Bash, Write
-version: 1.3.6
+tools: Read, Grep, Glob, Bash, Write, run_command
+version: 2.0.0
 agent: validator
 lifecycle-phase: Phase 3a (Evidence Verification)
 required-skills:
   - torusguard-verify
 scripts-binding:
-  - .torusguard/scripts/report_sync.py
-  - .torusguard/scripts/finding_scorer.py
+  - internal/validate/validate.go
+  - cmd/torusguard/main.go
+  - cmd/torusguard/mcp.go
 ---
 
 # /torusguard verify — Evidence Verification & Score Refinement
@@ -22,26 +23,22 @@ Evidence sufficiency verification, live disk line match audit, and finding score
 
 ---
 
-## Mandatory Pre-Flight Context Inspection
+## Tri-Mode Execution
 
-Inspect finding records and evidence integrity before verification:
-1. **Latest Run Records (`.torusguard/runs/`):** Locate most recent audit run directory.
-2. **Finding Files:** Confirm `findings.md` or `findings.json` exists in the target run folder.
-3. **Live File Drift:** Assert cited source files have not been edited or relocated on disk.
-4. **Scoring Model Calibration:** Ensure `finding_scorer.py` evaluates all 5 rubric dimensions.
-5. **Role Boundary:** Enforce validator role; do not apply code modifications during verification.
+| Mode | Command / Tool | Execution Method |
+| :--- | :--- | :--- |
+| **Mode A: Terminal CLI** | `torusguard verify` | Terminal audit of living security report and evidence presence. |
+| **Mode B: AI Chat Slash** | `/torusguard verify` | Live code line inspection, taint flow audit, and false-positive filtering. |
+| **Mode C: Native MCP Tool** | `torusguard_verify` | Agent tool call with `{"target": "."}` returning line audit proofs. |
 
 ---
 
-## When to Use /torusguard verify
+## Mandatory Pre-Flight Context Inspection
 
-| Trigger Scenario | Recommended Action |
-| :--- | :--- |
-| Auditing whether static findings are valid code flaws | Run `/torusguard verify` |
-| Upgrading Medium confidence finding to Confirmed | Run `/torusguard verify` |
-| No audit run executed yet | Run `/torusguard audit` first |
-| Running live network requests against endpoints | Run `/torusguard web-validate` |
-| Generating patch after verification | Run `/torusguard harden` |
+Inspect finding records and evidence integrity before verification:
+1. **Living Report (`security_report.md`):** Confirm report exists at workspace root.
+2. **Live File Drift:** Assert cited source files have not been edited or relocated on disk.
+3. **Role Boundary:** Enforce validator role; do not apply code modifications during verification.
 
 ---
 
@@ -49,34 +46,18 @@ Inspect finding records and evidence integrity before verification:
 - Confirmed evidence sufficiency transitions findings in `security_report.md` to `VERIFIED 🟠`.
 - False positives transition to `FALSE POSITIVE ⚪`.
 
+---
+
 ## Execution Steps
 
-1. **Locate Target Findings:** Load active findings from latest run directory.
+1. **Trigger Verification:**
+   - **Mode A (CLI):** Run `torusguard verify`.
+   - **Mode B (Chat):** Read cited lines via `view_file` and verify source-to-sink flow.
+   - **Mode C (MCP):** Call `torusguard_verify`.
 2. **Live Disk Line Match:** Read current code at cited line ranges; verify AST snippet matches.
 3. **Audit Evidence Sufficiency:** Assess whether taint path is unbroken and caller context is exposed.
-4. **Refine Confidence Scores:**
-   ```bash
-   python .torusguard/scripts/finding_scorer.py --run <run_dir> --verify
-   ```
-5. **Classify Status:** Assign verified state (`Confirmed`, `Plausible`, or `False Positive / Disputed`).
-6. **Emit Verification Ledger:** Write `verified-evidence.md` into the active run folder.
-
----
-
-## Failure Recovery
-
-- **Missing Run Folder:** Run `/torusguard audit` first to produce a valid run baseline.
-- **Line Drift Detected:** Flag line mismatch; scan nearby lines (±25) for relocated AST sink.
-- **Malformed Finding JSON:** Repair JSON structure using finding schema before scoring.
-- **Halt Trigger:** Abort if cited files are completely deleted from disk.
-
----
-
-## Hallucination Guard
-
-- ❌ Never confirm a finding if the cited sink has already been sanitized by middleware.
-- ❌ Never bump confidence score without documenting unbroken taint source-to-sink flow.
-- ✅ Always anchor line matches to live disk reads using `view_file`.
+4. **Classify Status:** Assign verified state (`Confirmed`, `Plausible`, or `False Positive`).
+5. **Update Living Ledger:** Update statuses in `security_report.md`.
 
 ---
 
@@ -84,17 +65,16 @@ Inspect finding records and evidence integrity before verification:
 
 ```markdown
 ### 🧪 TorusGuard Evidence Verification
-- **Run ID:** `run-YYYYMMDD-HHMMSS-audit`
+- **Report File:** `security_report.md`
 - **Findings Evaluated:** [Count] findings
 - **Confirmed Real:** [Count] verified flaws
-- **Downgraded / False Positives:** [Count] filtered out
-- **Refined Mean Score:** [Score]/100
-- **Ledger:** `.torusguard/runs/<run_id>/verified-evidence.md`
+- **False Positives Filtered:** [Count]
+- **Status:** Evidence verified on disk
 ```
 
 ---
 
 ## Next Steps
 
-1. Run `/torusguard web-validate` if live endpoint probing is required.
-2. Run `/torusguard harden` to build surgical patch bundles for verified flaws.
+1. Run `/torusguard harden` to build surgical patch bundles for verified flaws.
+2. Run `/torusguard web-validate` if live endpoint probing is required.

package/.torusguard/workflows/web-validate.md

@@ -1,14 +1,14 @@
 ---
 description: Authorized HTTP probing, token redaction, transparent audit header injection, and replay trace capture.
-tools: Read, Grep, Glob, Bash, Write
-version: 1.3.6
+tools: Read, Grep, Glob, Bash, Write, run_command
+version: 2.0.0
 agent: validator
 lifecycle-phase: Phase 3b (Runtime Web Validation)
 required-skills:
   - torusguard-web-validate
 scripts-binding:
-  - .torusguard/scripts/report_sync.py
-  - .torusguard/scripts/safety_gate.py
+  - internal/validate/validate.go
+  - cmd/torusguard/main.go
 ---
 
 # /torusguard web-validate — Bounded HTTP Probing & Session Capture
@@ -18,7 +18,17 @@ $ARGUMENTS
 ---
 
 ## Objective
-Authorized HTTP probing, token redaction, transparent audit header injection, and replay capture.
+Authorized HTTP probing, token redaction, transparent audit header injection, and replay capture against local/staging web applications.
+
+---
+
+## Tri-Mode Execution
+
+| Mode | Command / Tool | Execution Method |
+| :--- | :--- | :--- |
+| **Mode A: Terminal CLI** | `torusguard web-validate [--url <url>]` | Terminal execution of bounded HTTP validator. |
+| **Mode B: AI Chat Slash** | `/torusguard web-validate` | Interactive verification of endpoints and security headers. |
+| **Mode C: Native MCP Tool** | Scope Guarded Probing | Safe runtime probing guarded by `scope.json` and SSRF boundaries. |
 
 ---
 
@@ -26,53 +36,21 @@ Authorized HTTP probing, token redaction, transparent audit header injection, an
 
 Inspect authorization parameters and safety limits before sending HTTP requests:
 1. **Active Scope (`.torusguard/config/scope.json`):** Assert target host and path are authorized with valid TTL.
-2. **Safety Gate Classification:** Test proposed endpoint against `.torusguard/scripts/safety_gate.py`.
+2. **SSRF Boundary Enforcement:** Assert target does not resolve to private cloud metadata (`169.254.169.254`).
 3. **Sensitive Route Guard:** Ensure destructive endpoints (`DELETE`, account drops) are never called automatically.
 4. **Token Redaction Pipeline:** Ensure bearer tokens and session cookies are masked (`Bearer [REDACTED]`).
 5. **Request Budget:** Enforce maximum cap of 50 requests per validation session.
 
 ---
 
-## When to Use /torusguard web-validate
-
-| Trigger Scenario | Recommended Action |
-| :--- | :--- |
-| Testing live route accessibility and security headers | Run `/torusguard web-validate` |
-| Verifying cookie security flags (`HttpOnly`, `Secure`, `SameSite`) | Run `/torusguard web-validate` |
-| Checking CORS headers and authentication barriers | Run `/torusguard web-validate` |
-| Pure static source code analysis | Run `/torusguard audit` |
-| Confirming exploitable attack vectors | Run `/torusguard exploit-check` |
-
----
-
 ## Execution Steps
 
-1. **Verify Legal Scope:** Check target URL against `.torusguard/config/scope.json`.
-2. **Invoke Safety Gate:**
-   ```bash
-   python .torusguard/scripts/safety_gate.py check --url <target_url> --method GET
-   ```
-3. **Dispatch Non-Destructive Probe:** Send bounded HTTP request with audit header `X-TorusGuard-AuthID`.
-4. **Redact Sensitive Headers:** Sanitize auth tokens and credentials in request and response objects.
-5. **Write Replay Artifacts:**
-   Record sanitized trace in `.torusguard/runs/<run_id>/requests.json` and emit `web-validation.md`.
-
----
-
-## Failure Recovery
-
-- **Target Offline:** Verify local dev server is active and accessible on designated host port.
-- **Safety Gate Rejection (Manual Only):** Halt probe immediately; report endpoint requires human manual test.
-- **Rate Limit / 429:** Back off exponentially (1s, 2s, 4s); stop session if 429 persists.
-- **Halt Trigger:** Abort if target domain deviates from authorized allowlist in `scope.json`.
-
----
-
-## Hallucination Guard
-
-- ❌ Never dispatch HTTP requests outside domains explicitly listed in `.torusguard/config/scope.json`.
-- ❌ Never write raw Authorization headers or plaintext secrets to disk.
-- ✅ Always include transparent audit headers (`X-TorusGuard-AuthID`).
+1. **Trigger Web Validation:**
+   - **Mode A (CLI):** Run `torusguard web-validate --url http://localhost:3000`.
+   - **Mode B (Chat):** Send non-destructive probe and inspect response headers.
+2. **Audit Security Headers:** Check CSP, HSTS, X-Content-Type-Options, and CORS headers.
+3. **Audit Cookie Flags:** Verify `HttpOnly`, `Secure`, and `SameSite` on session cookies.
+4. **Sanitize Traces:** Redact all secrets and save sanitized replay trace.
 
 ---
 
@@ -84,7 +62,6 @@ Inspect authorization parameters and safety limits before sending HTTP requests:
 - **Endpoints Probed:** [Count] routes tested
 - **Security Headers:** [CSP / HSTS / CORS status]
 - **Cookie Security:** [HttpOnly / Secure / SameSite status]
-- **Replay Trace:** `.torusguard/runs/<run_id>/replay.json`
 - **Status:** COMPLETED — non-destructive probe finished
 ```
 

package/README.md

@@ -11,8 +11,8 @@
 
 <p align="center">
   <a href="LICENSE"><img src="https://img.shields.io/badge/License-MIT-blue.svg" alt="License: MIT"></a>
-  <a href="https://github.com/githubmofo/TorusGuard/releases"><img src="https://img.shields.io/badge/version-2.0.0--alpha-orange.svg" alt="Version"></a>
-  <a href="https://www.npmjs.com/package/torusguard"><img src="https://img.shields.io/badge/npm-v2.0.0--alpha-CB3837?logo=npm&logoColor=white" alt="npm: v2.0.0-alpha"></a>
+  <a href="https://github.com/githubmofo/TorusGuard/releases"><img src="https://img.shields.io/badge/version-v2.1.0-orange.svg" alt="Version"></a>
+  <a href="https://www.npmjs.com/package/torusguard"><img src="https://img.shields.io/badge/npm-v2.1.0-CB3837?logo=npm&logoColor=white" alt="npm: v2.1.0"></a>
   <img src="https://img.shields.io/badge/Privacy-Local_First-success" alt="Privacy: Local First">
   <img src="https://img.shields.io/badge/Dependencies-Zero-brightgreen" alt="Dependencies: Zero">
   <img src="https://img.shields.io/badge/SARIF-v2.1.0-6C3483" alt="SARIF">
@@ -24,7 +24,7 @@
   <img src="https://img.shields.io/badge/Polyglot%20Tests-36%2F36%20Repos%20Passed-brightgreen?logo=checkmarx&logoColor=white" alt="Polyglot Tests: 36/36 Repos Passed">
   <img src="https://img.shields.io/badge/Tri--Mode%20E2E-16%2F16%20Verified-blue?logo=checkmarx&logoColor=white" alt="Tri-Mode E2E: 16/16 Verified">
   <img src="https://img.shields.io/badge/Vision%20OCR-Tested%20%26%20Verified-blueviolet?logo=tesseract&logoColor=white" alt="Vision OCR: Tested & Verified">
-  <img src="https://img.shields.io/badge/Rules%20Verified-74%2F74%20Rules-success" alt="Rules: 74/74 Verified">
+  <img src="https://img.shields.io/badge/Rules%20Verified-86%2F86%20Rules-success" alt="Rules: 86/86 Verified">
 </p>
 
 <p align="center">
@@ -42,13 +42,13 @@
 
 - [What Is TorusGuard?](#what-is-torusguard)
 - [Features](#-features)
-- [Autonomous Architecture](#-autonomous-architecture)
+- [Autonomous Architecture & Workflow](#-autonomous-architecture--workflow)
 - [Prerequisites](#-prerequisites)
 - [Installation](#-installation)
 - [Usage](#-usage)
 - [Commands](#-commands)
 - [Project Structure](#-project-structure)
-- [Security Rules (74 Rules, 18 Families)](#-security-rules-74-rules-18-families)
+- [Security Invariants & Rule Governance](#-security-invariants--rule-governance)
 - [AI Agent Integration](#-ai-agent-integration)
 - [Verified Test Suite & Benchmarks](#-verified-test-suite--mass-benchmarks)
 - [Non-Negotiable Invariants](#-non-negotiable-invariants)
@@ -60,10 +60,11 @@
 
 ## What Is TorusGuard?
 
-TorusGuard is a **zero-dependency, single-binary security engine** that scans, hardens, and validates AI-generated codebases. It enforces 74 security rules across 18 architectural families and works in two complementary modes:
+TorusGuard is a **zero-dependency, single-binary security engine** that scans, hardens, and validates AI-generated codebases. It enforces 86 security rules across 22 architectural families and works across three unified operational modes (**Tri-Mode Parity**):
 
-- **CLI Mode (Go Binary)** — A deterministic scanner and enforcer that runs in your terminal or CI/CD pipeline.
-- **AI Agent Mode** — Integrates natively with Antigravity, Cursor, Claude Code, Windsurf, VS Code, and other AI coding assistants via slash commands.
+- **Mode A: Terminal CLI (Go Binary)** — A deterministic scanner and enforcer that runs in your terminal or CI/CD pipeline (`torusguard <command>`).
+- **Mode B: AI Chat Slash Commands** — Integrates natively with Antigravity, Cursor, Claude Code, Windsurf, VS Code, and other AI coding assistants via slash commands (`/torusguard <command>`).
+- **Mode C: Native MCP Tools** — Stdio Model Context Protocol (JSON-RPC 2.0) interface exposing autonomous security tools and living resources directly to AI agents.
 
 TorusGuard ensures that the code your AI assistant writes is secure *before* it reaches production.
 
@@ -71,8 +72,11 @@ TorusGuard ensures that the code your AI assistant writes is secure *before* it
 
 ## ✨ Features
 
-- **74 Security Rules** across 18 families (Secrets, Auth, SQL Injection, SSRF, CSRF, GraphQL, Supply Chain, and more)
+- **86 Security Rules** across 22 families (Secrets, Auth, SQL Injection, SSRF, CSRF, GraphQL, Supply Chain, Containers, Git History, ReDoS, AI & RAG, and more)
+- **First-Principles Security Suite** — Built-in native scanners for Dockerfile/Compose privilege bounds, Git commit log secret mining, exponential regex backtracking, and cross-tenant vector isolation
 - **Heuristic AST Scanner** — Polyglot static analysis for Go, JavaScript, TypeScript, and Python
+- **Line-Level Reflection Module** — Semantic patch synthesis (`find_snippet` / `replace_snippet`) that accurately replaces exact code blocks without brittle line-number offsets
+- **1/9th Token Bounded Context Extraction** — AST context extraction (±3 lines) via `scanner.ExtractContext` to keep review prompts hyper-efficient and prevent context saturation
 - **Ponytail Protocol** — Surgical patch bounds (≤35 additions, ≤25 deletions) to prevent full-file rewrites
 - **Pre-Apply Snapshots** — Automatic `.bak` rollback snapshots before every code modification
 - **SARIF v2.1.0 Export** — Standards-compliant output for GitHub Advanced Security, VS Code, and other SARIF consumers
@@ -104,37 +108,64 @@ TorusGuard’s static scanner and enforcement binary have been rigorously tested
 
 ---
 
-## 🏗️ Autonomous Architecture
+## 🏗️ Autonomous Architecture & Workflow
 
 TorusGuard uses a **tri-track architecture** where intelligence, deterministic enforcement, and agent tool execution are cleanly separated across three unified operational modes:
 
 ```mermaid
 flowchart TD
-    User([Developer / CI / AI Coding Assistant])
-    
-    User --> ModeA[Mode A: Terminal CLI<br/><code>torusguard &lt;cmd&gt;</code><br/>Deterministic Go Binary]
-    User --> ModeB[Mode B: AI Chat Slash Command<br/><code>/torusguard &lt;cmd&gt;</code><br/>Chat Prompt & Workflow Bridge]
-    User --> ModeC[Mode C: Native MCP Protocol<br/><code>torusguard_audit / ocr_scan</code><br/>Stdio JSON-RPC 2.0 Agent Tools]
-    
-    ModeA --> Router[Command Router & Dispatcher<br/>cmd/torusguard]
-    ModeB --> Router
-    ModeC --> Router
-    
-    Router --> Engine
-    
-    subgraph Engine[TorusGuard Core Engine]
-        Scanner[Polyglot AST & Heuristic Scanner<br/>74 Rules across 18 Families]
-        OCR[Multi-Modal Vision OCR Engine<br/>Tesseract Optical Analysis &le;10MB]
-        Harden[Harden Engine<br/>Ponytail Protocol &le;35 add, &le;25 del]
-        Apply[Snapshot & Apply Engine<br/>Byte-for-byte Rollback Backups]
-        Validate[Runtime Web Validator<br/>SSRF Defense & Audit Probing]
-        Recheck[Differential Recheck Engine<br/>Fix Closure Verification]
+    subgraph Ingress["Unified Tri-Mode Ingress"]
+        ModeA["<b>Mode A: Terminal CLI</b><br/><code>torusguard &lt;cmd&gt;</code><br/>Deterministic Single Binary"]
+        ModeB["<b>Mode B: AI Chat Slash Commands</b><br/><code>/torusguard &lt;cmd&gt;</code><br/>Cursor &bull; Claude &bull; Windsurf &bull; Antigravity"]
+        ModeC["<b>Mode C: Native MCP Tools</b><br/><code>torusguard_*</code> (10 Tools &bull; 2 Resources)<br/>Stdio JSON-RPC 2.0 Agent Server"]
     end
-    
-    Engine --> Ledger[Living Security Ground Truth<br/><code>security_report.md</code>]
-    Engine --> Workspace[(.torusguard/ Workspace State<br/>rules/ &bull; schemas/ &bull; memory/ &bull; snapshots/)]
+
+    Ingress --> Router["<b>Command Router &amp; Dispatcher</b><br/>cmd/torusguard (21 Commands)"]
+
+    subgraph Core["TorusGuard Core Security Engine (Go Single Binary)"]
+        direction TB
+        subgraph Scanners["First-Principles &amp; Multi-Modal Scanner Suite"]
+            AST["<b>Polyglot AST &amp; Heuristic Scanner</b><br/>Go &bull; TS/JS &bull; Python &bull; SQL &bull; Auth &bull; SSRF &bull; CSRF"]
+            OCR["<b>Multi-Modal Vision OCR Engine</b><br/>Tesseract v5.4.0 &bull; Leaked Keys in PNG/JPG &le;10MB"]
+            Container["<b>Container &amp; Dockerfile Auditor</b><br/>Root Execution &bull; Docker Sockets &bull; Build Secrets"]
+            GitMine["<b>Git History Secret Miner</b><br/>Past Commits &bull; Diff Logs &bull; Remote Credentials"]
+            ReDoS["<b>ReDoS Complexity Analyzer</b><br/>Polynomial &amp; Exponential Backtracking Loops"]
+            AIGuard["<b>AI Agent &amp; RAG Vector Guard</b><br/>Prompt Injection &bull; Tenant Vector Contamination"]
+        end
+
+        subgraph Governance["Governance &amp; Remediation Pipeline"]
+            Harden["<b>Harden &amp; Line Reflection</b><br/>Ponytail Bounds: &le;35 Add &bull; &le;25 Del"]
+            Snapshot["<b>Pre-Apply Snapshot Engine</b><br/>Byte-for-Byte Rollback Backups in .torusguard/snapshots/"]
+            HumanGate{"<b>Human Gate Authorization</b><br/>Explicit --yes Confirmation Required"}
+            Recheck["<b>Differential Recheck Engine</b><br/>Zero-Regression Fix Closure"]
+        end
+    end
+
+    Router --> Scanners
+    Scanners --> Ledger[("<b>Living Security Ledger</b><br/><code>security_report.md</code><br/>Single Source of Truth")]
+    Ledger --> Harden
+    Harden --> Snapshot
+    Snapshot --> HumanGate
+    HumanGate -- Approved --> Recheck
+    Recheck --> Outputs["<b>Enterprise Outputs</b><br/>OASIS SARIF v2.1.0 &bull; Dark-Mode HTML Report &bull; Golden Fix Distillation"]
+
+    classDef ingressStyle fill:#1e293b,stroke:#38bdf8,stroke-width:2px,color:#f8fafc;
+    classDef scannerStyle fill:#0f172a,stroke:#818cf8,stroke-width:2px,color:#f8fafc;
+    classDef govStyle fill:#0f172a,stroke:#34d399,stroke-width:2px,color:#f8fafc;
+    classDef ledgerStyle fill:#312e81,stroke:#a78bfa,stroke-width:2px,color:#f8fafc;
+    classDef outStyle fill:#064e3b,stroke:#10b981,stroke-width:2px,color:#f8fafc;
+
+    class ModeA,ModeB,ModeC ingressStyle;
+    class AST,OCR,Container,GitMine,ReDoS,AIGuard scannerStyle;
+    class Harden,Snapshot,HumanGate,Recheck govStyle;
+    class Ledger ledgerStyle;
+    class Outputs outStyle;
 ```
 
+> 🌐 **Interactive Architecture Visualizations:**
+> - [**System Architecture Diagram** (HTML)](docs/architecture/torusguard-architecture.html) — Dynamic zoomable/pannable pipeline with dark/light themes, live view switching (Tri-Mode Ingress, AST Engine, Multi-Modal Vision OCR, Ponytail Bounds, Fail-Closed Recovery), and SVG/PNG export.
+> - [**Governed Remediation Workflow** (HTML)](docs/architecture/torusguard-governance.workflow.html) — Step-by-step visual trace of the 7-stage remediation loop, safety gates, and automatic rollback path.
+
 **Key design decisions:**
 - **Tri-Mode Parity:** The CLI (Mode A), Chat Slash Commands (Mode B), and Native MCP Tools (Mode C) share the exact same underlying governance and validation rules.
 - **Multi-Modal Vision OCR:** Images, architecture diagrams, and screenshots are automatically scanned for leaked secrets using Tesseract OCR, bounded by strict 10MB memory safety limits.
@@ -169,7 +200,7 @@ npx torusguard init
 ```
 
 <a href="https://www.npmjs.com/package/torusguard">
-  <img src="https://img.shields.io/badge/npm-v2.0.0--alpha-CB3837?logo=npm&logoColor=white" alt="npm package">
+  <img src="https://img.shields.io/badge/npm-v2.1.0-CB3837?logo=npm&logoColor=white" alt="npm package">
 </a>
 
 ### Option 2: Build from Source (Recommended for Contributors)
@@ -257,6 +288,10 @@ torusguard exploit-check
 | `authorize`      | Generate cryptographic auth tokens for runtime probing         |
 | `web-validate`   | Authorized HTTP probing with `X-TorusGuard-Audit` headers      |
 | `ocr-scan`       | Run Tesseract OCR secret scan on images/diagrams (<10MB)       |
+| `container`      | Audit Dockerfile, compose, and container configurations        |
+| `git-mine`       | Mine git commit history for leaked secrets & creds             |
+| `redos`          | Analyze regex patterns for catastrophic backtracking           |
+| `ai-guard`       | Scan AI/LLM code for prompt injection & RAG flaws              |
 | `mcp`            | Run native Model Context Protocol (MCP) server over stdio      |
 | `update`         | Self-update the TorusGuard engine                              |
 | `help`           | Show interactive command guide                                 |
@@ -272,7 +307,9 @@ TorusGuard/
 │   └── mcp.go            # Model Context Protocol (MCP) JSON-RPC 2.0 stdio server
 ├── internal/
 │   ├── apply/            # Patch application + pre-apply snapshot engine
-│   ├── harden/           # Ponytail Protocol bounds enforcement
+│   ├── harden/           # Ponytail Protocol bounds enforcement & line-level reflection
+│   │   ├── patch.go      # Ponytail Protocol bounds verification
+│   │   └── reflection.go # Line-level reflection & semantic replacement
 │   ├── memory/           # Golden Fix recipe persistence
 │   ├── recheck/          # Differential re-scan engine
 │   ├── report/           # SARIF v2.1.0 + dark-mode HTML generators
@@ -296,28 +333,13 @@ TorusGuard/
 
 ---
 
-## 🔒 Security Rules (74 Rules, 18 Families)
-
-| Family         | Domain                           | Rules | Core Invariant                                           |
-| :------------- | :------------------------------- | :---: | :------------------------------------------------------- |
-| `TG-SEC`       | Core Secrets & API Tokens        |   7   | Zero hardcoded API keys or JWT secrets in source          |
-| `TG-AUTH`      | Authentication & Sessions        |   8   | Timing-safe compares, strong hashing, algorithm verify    |
-| `TG-DB`        | Database Isolation & Injection   |   4   | Parameterized queries and tenant partition scoping        |
-| `TG-INPUT`     | Input Sanitization & Traversal   |   6   | Strict path sanitization, safe DOM assignments            |
-| `TG-RATE`      | Rate Limiting & Resources        |   3   | Rate-limiting on auth endpoints, payload size bounds      |
-| `TG-AGENT`     | AI Agent & LLM Injection         |   4   | Structural prompt isolation, tool call schema validation  |
-| `TG-SSRF`      | Server-Side Request Forgery      |   4   | Hostname whitelisting, private IP range blocking          |
-| `TG-WEBHOOK`   | Inbound Webhook Verification     |   4   | HMAC-SHA256 signature verification, replay prevention     |
-| `TG-WS`        | WebSocket & Real-Time            |   4   | Origin verification, handshake auth, frame size limits    |
-| `TG-CSRF`      | Cross-Site Request Forgery       |   2   | SameSite cookies, anti-CSRF token verification            |
-| `TG-GQL`       | GraphQL Safety                   |   4   | Query depth limiting, introspection suppression           |
-| `TG-SUPPLY`    | Supply Chain & Dependencies      |   6   | Lockfile integrity, known CVE audits                      |
-| `TG-BIZ`       | Business Logic & Workflows       |   4   | Negative amount validation, transaction locks             |
-| `TG-CACHE`     | Cache Poisoning & Timing         |   3   | Cache-control headers, unkeyed header sanitization        |
-| `TG-CLIENT`    | Client Bundle & Frontend         |   2   | Zero private env vars in client bundles                   |
-| `TG-PLATFORM`  | Server Hardening & Headers       |   4   | Helmet headers, debug suppression, cookie secure flags    |
-| `TG-DIFF`      | Polyglot Bypass & Churn          |   3   | Block `# nosec`, `InsecureSkipVerify`, churn bounds       |
-| `TG-EDGE`      | Edge Computing & Serverless      |   2   | Subrequest fan-out limits, execution timeouts             |
+## 🔒 Security Invariants & Rule Governance
+
+TorusGuard enforces **86 security invariants across 22 architectural families** covering Secrets, Authentication, Multi-Tenant Database Isolation, Input Sanitization, Rate Limiting, AI Agent Prompt Injection, SSRF, Webhooks, WebSockets, CSRF, GraphQL, Supply Chain, Business Logic, Cache Poisoning, Client Bundles, Platform Headers, Polyglot Bypasses, Edge Timeouts, Container & Docker Safety, Git History Secret Mining, Regular Expression Backtracking (ReDoS), and Vector Database RAG Isolation.
+
+> 📘 **Full Rules Catalog & Invariants:**  
+> The complete rulebook with formal invariant definitions, severity scores, and testing signatures is maintained in [`AGENTS.md`](AGENTS.md) and the [`rules/`](rules/) directory.  
+> You can also explore verified Golden Fix patterns anytime via `torusguard recipes` or stream the live catalog over MCP via `torusguard://rules_catalog`.
 
 ---
 
@@ -356,10 +378,16 @@ When configured with `.agents/mcp_config.json` or `mcp_config.json`, AI coding a
 
 - `torusguard_audit`: Deep static AST scan + Vision OCR; writes `security_report.md`
 - `torusguard_ocr_scan`: Dedicated image credential analysis via Tesseract (5-10MB bounds)
+- `torusguard_container`: Audits container files for root execution, docker socket exposure, and privileged mode
+- `torusguard_git_mine`: Mines git commit history and config for leaked credentials and tokens
+- `torusguard_redos`: Analyzes regex patterns for catastrophic exponential backtracking
+- `torusguard_ai_guard`: Audits AI agent prompt templates, tool registries, and vector database queries
+- `torusguard_verify`: Asserts evidence sufficiency & line-shift invariant fingerprint matches
 - `torusguard_harden`: Validates remediation diff against Ponytail Protocol bounds
 - `torusguard_recheck`: Differential re-scan confirming fix closure
 - `torusguard_status`: Workspace posture and tech stack inspection
 - `torusguard://security_report`: MCP Resource reading the living security report
+- `torusguard://rules_catalog`: MCP Resource exploring verified rules catalog & Golden Fix patterns
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "torusguard",
-  "version": "2.0.0-alpha",
+  "version": "2.1.0",
   "description": "Security guardrails, governed remediation, and authorized runtime validation for AI-built web applications.",
   "main": "bin/torusguard.js",
   "bin": {