plugin-scanner 2.0.781__tar.gz → 2.0.783__tar.gz

{plugin_scanner-2.0.781 → plugin_scanner-2.0.783}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plugin-scanner
-Version: 2.0.781
+Version: 2.0.783
 Summary: Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows.
 Project-URL: Homepage, https://github.com/hashgraph-online/hol-guard
 Project-URL: Repository, https://github.com/hashgraph-online/hol-guard
@@ -358,7 +358,7 @@ pip install "hol-guard[cisco]"
 pip install "plugin-scanner[cisco]"
 ```
 
-`cisco-ai-mcp-scanner` stays in the optional `cisco` extra because it is Python 3.11+ only and adds a heavier YARA-backed install surface than the lean baseline should require. Cisco currently supports the published `litellm==1.83.7` release across the scanner install surface, so this repository keeps that Cisco-compatible pin for full coverage.
+`cisco-ai-mcp-scanner` stays in the optional `cisco` extra because it is Python 3.11+ only and adds a heavier YARA-backed install surface than the lean baseline should require. Cisco currently supports the published `litellm==1.84.0` release across the scanner install surface, so this repository keeps that Cisco-compatible pin for full coverage.
 
 On Guard surfaces, the Cisco extra adds optional offline evidence to `hol-guard scan`, `hol-guard preflight`, and `hol-guard explain <path>`. Use `--cisco-mode {auto,on,off}` to control that consumer-mode evidence path for local artifact scans. `hol-guard run` and Guard runtime prompt/file-read protection remain native Guard behavior in this pass.
 

{plugin_scanner-2.0.781 → plugin_scanner-2.0.783}/README.md

@@ -315,7 +315,7 @@ pip install "hol-guard[cisco]"
 pip install "plugin-scanner[cisco]"
 ```
 
-`cisco-ai-mcp-scanner` stays in the optional `cisco` extra because it is Python 3.11+ only and adds a heavier YARA-backed install surface than the lean baseline should require. Cisco currently supports the published `litellm==1.83.7` release across the scanner install surface, so this repository keeps that Cisco-compatible pin for full coverage.
+`cisco-ai-mcp-scanner` stays in the optional `cisco` extra because it is Python 3.11+ only and adds a heavier YARA-backed install surface than the lean baseline should require. Cisco currently supports the published `litellm==1.84.0` release across the scanner install surface, so this repository keeps that Cisco-compatible pin for full coverage.
 
 On Guard surfaces, the Cisco extra adds optional offline evidence to `hol-guard scan`, `hol-guard preflight`, and `hol-guard explain <path>`. Use `--cisco-mode {auto,on,off}` to control that consumer-mode evidence path for local artifact scans. `hol-guard run` and Guard runtime prompt/file-read protection remain native Guard behavior in this pass.
 

{plugin_scanner-2.0.781 → plugin_scanner-2.0.783}/docker-requirements.txt

@@ -987,9 +987,9 @@ linkify-it-py==2.1.0 \
     --hash=sha256:0d252c1594ecba2ecedc444053db5d3a9b7ec1b0dd929c8f1d74dce89f86c05e \
     --hash=sha256:43360231720999c10e9328dc3691160e27a718e280673d444c38d7d3aaa3b98b
     # via markdown-it-py
-litellm==1.83.7 \
-    --hash=sha256:5784a1d9a9a4a8acd6ca1e347003a5e2e1b3c749b4d41e7da4904577adade111 \
-    --hash=sha256:e2f2cb99df2e2b2eab63f1354faa45c88dd7c8d40c18eb648afb1b349c689633
+litellm==1.84.0 \
+    --hash=sha256:2a58d6041e6aa27d1a28dc8d8828ab500fef1a00ef74ca65e60899035010c2f2 \
+    --hash=sha256:b8ad0cbea11a5941b18d5af973017a340abd3d3ab41cb86e5401b970626d71a6
     # via
     #   --override (workspace)
     #   cisco-ai-mcp-scanner
@@ -2329,13 +2329,18 @@ typing-extensions==4.15.0 \
     --hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
     --hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548
     # via
+    #   aiohttp
+    #   aiosignal
     #   anthropic
+    #   anyio
     #   fastapi
     #   huggingface-hub
     #   mcp
     #   openai
     #   pydantic
     #   pydantic-core
+    #   referencing
+    #   starlette
     #   textual
     #   typing-inspection
 typing-inspection==0.4.2 \

{plugin_scanner-2.0.781 → plugin_scanner-2.0.783}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "plugin-scanner"
-version = "2.0.781"
+version = "2.0.783"
 description = "Lint, verify, and gate plugin ecosystems for maintainers, CI, and publish workflows."
 readme = "README.md"
 license = "Apache-2.0"
@@ -60,7 +60,7 @@ override-dependencies = [
     "fastapi==0.137.1",
     "importlib-metadata==9.0.0",
     "jsonschema==4.26.0",
-    "litellm==1.83.7",
+    "litellm==1.84.0",
     "openai==2.41.1",
     "pyjwt==2.13.0",
     "python-dotenv==1.2.2",

{plugin_scanner-2.0.781 → plugin_scanner-2.0.783}/pyproject.toml.bak

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hol-guard"
-version = "2.0.781"
+version = "2.0.783"
 description = "Protect local AI harnesses with HOL Guard and run scanner checks for Codex, Claude, Cursor, Gemini, and OpenCode."
 readme = "README.md"
 license = "Apache-2.0"
@@ -60,7 +60,7 @@ override-dependencies = [
     "fastapi==0.137.1",
     "importlib-metadata==9.0.0",
     "jsonschema==4.26.0",
-    "litellm==1.83.7",
+    "litellm==1.84.0",
     "openai==2.41.1",
     "pyjwt==2.13.0",
     "python-dotenv==1.2.2",

{plugin_scanner-2.0.781 → plugin_scanner-2.0.783}/src/codex_plugin_scanner/guard/approvals.py

@@ -341,6 +341,9 @@ def apply_approval_resolution(
     request_publisher = _string_or_none(request.get("publisher"))
     scoped_artifact_id = request_artifact_id if scope in {"artifact", "harness", "global"} else workspace_artifact_id
     scoped_artifact_hash = request_artifact_hash if scope == "artifact" else workspace_artifact_hash
+    artifact_runtime_exact_match_key = _artifact_scope_runtime_exact_match_key(request, scope)
+    if artifact_runtime_exact_match_key is not None:
+        scoped_artifact_hash = artifact_runtime_exact_match_key
     broad_runtime_exact_match_key = _broad_runtime_exact_match_key(request, scope)
     if broad_runtime_exact_match_key is not None:
         scoped_artifact_hash = broad_runtime_exact_match_key
@@ -353,6 +356,7 @@ def apply_approval_resolution(
         workspace=workspace if scope == "workspace" else None,
         publisher=request_publisher if scope == "publisher" else None,
         reason=reason,
+        source="approval-gate",
     )
     resolved_at = now or _now()
     resolved_gate_grant = require_approval_decision(
@@ -448,6 +452,13 @@ def _workspace_policy_artifact_keys(request: Mapping[str, object], scope: str) -
     return artifact_id, artifact_hash
 
 
+def _artifact_scope_runtime_exact_match_key(request: Mapping[str, object], scope: str) -> str | None:
+    if scope != "artifact" or request.get("artifact_type") != "tool_action_request":
+        return None
+    artifact_id = request.get("artifact_id")
+    return _runtime_scoped_exact_match_key(artifact_id) if isinstance(artifact_id, str) else None
+
+
 def _broad_runtime_exact_match_key(request: Mapping[str, object], scope: str) -> str | None:
     if scope not in {"harness", "global"}:
         return None

{plugin_scanner-2.0.781 → plugin_scanner-2.0.783}/src/codex_plugin_scanner/guard/daemon/server.py

@@ -1224,7 +1224,21 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
             self._write_json(approval)
             return
         if parsed.path == "/v1/receipts":
-            self._write_json({"items": store.list_receipts(limit=200)})
+            query = parse_qs(parsed.query)
+            harness_q = query.get("harness", [None])[-1]
+            limit_q = query.get("limit", ["200"])[-1]
+            try:
+                limit_v = min(max(int(limit_q), 1), 500)
+            except (ValueError, TypeError):
+                limit_v = 200
+            self._write_json(
+                {
+                    "items": store.list_receipts(
+                        limit=limit_v,
+                        harness=harness_q if isinstance(harness_q, str) and harness_q else None,
+                    )
+                }
+            )
             return
         if parsed.path == "/v1/receipts/analytics":
             query = parse_qs(parsed.query)
@@ -1299,7 +1313,7 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
             before_q = query.get("before", [None])[-1]
             limit_q = query.get("limit", ["100"])[-1]
             try:
-                limit_v = min(int(limit_q), 500)
+                limit_v = min(max(int(limit_q), 1), 500)
             except (ValueError, TypeError):
                 limit_v = 100
             with store._connect() as conn:
@@ -1310,6 +1324,7 @@ class _GuardDaemonHandler(BaseHTTPRequestHandler):
                     severity=severity_q if isinstance(severity_q, str) else None,
                     before_cursor=before_q if isinstance(before_q, str) else None,
                     limit=limit_v,
+                    include_details=False,
                 )
                 total = count_evidence(
                     conn,

{plugin_scanner-2.0.781 → plugin_scanner-2.0.783}/src/codex_plugin_scanner/guard/store.py

@@ -899,6 +899,11 @@ def receipt_index_statements() -> list[str]:
         ("create index if not exists idx_receipts_harness_artifact on runtime_receipts(harness, artifact_id)"),
         ("create index if not exists idx_receipts_timestamp_harness on runtime_receipts(timestamp, harness)"),
         ("create index if not exists idx_receipts_timestamp_desc on runtime_receipts(timestamp desc)"),
+        ("create index if not exists idx_receipts_harness_timestamp_desc on runtime_receipts(harness, timestamp desc)"),
+        (
+            "create index if not exists idx_receipts_harness_artifact_timestamp_desc "
+            "on runtime_receipts(harness, artifact_id, timestamp desc)"
+        ),
     ]
 
 
@@ -2784,6 +2789,7 @@ class GuardStore:
         current_time = now or _now()
         workspace_key = _workspace_policy_key(workspace)
         action_family_key = _artifact_family_key(artifact_id)
+        runtime_exact_match_key = _runtime_scoped_exact_match_key(artifact_id) if artifact_hash is not None else None
         events: list[tuple[str, dict[str, object]]] = []
         selected_payload: dict[str, object] | None = None
         with self._connect() as connection:
@@ -2800,6 +2806,7 @@ class GuardStore:
                   (
                     scope = 'artifact' and artifact_id = ? and (
                       artifact_hash is null or (? is not null and artifact_hash = ?)
+                      or (? is not null and artifact_hash = ?)
                     )
                   )
                   or (
@@ -2839,6 +2846,8 @@ class GuardStore:
                     artifact_id,
                     artifact_hash,
                     artifact_hash,
+                    runtime_exact_match_key,
+                    runtime_exact_match_key,
                     workspace_key,
                     workspace,
                     artifact_id,
@@ -2880,7 +2889,11 @@ class GuardStore:
                         state=state,
                     )
                     break
-                if integrity_result.status == "missing_integrity" and state.get("enforcement") == "warn":
+                if _warn_only_policy_integrity_status(
+                    integrity_result.status,
+                    state,
+                    source=str(candidate["source"]),
+                ):
                     events.append(
                         (
                             "policy_integrity_warning",
@@ -2893,8 +2906,9 @@ class GuardStore:
                         )
                     )
                     _store_logger.warning(
-                        "Guard honored legacy unsigned local policy decision %s while integrity enforcement is warn.",
+                        "Guard honored local policy decision %s while integrity enforcement is warn (%s).",
                         candidate["decision_id"],
+                        integrity_result.status,
                     )
                     selected_payload = self._policy_row_payload(
                         candidate,
@@ -6181,6 +6195,28 @@ def _scoped_runtime_row_requires_exact_match(
     return stored_artifact_hash != expected_exact_key
 
 
+def _warn_only_policy_integrity_status(status: str, state: Mapping[str, object], *, source: str = "local") -> bool:
+    if state.get("enforcement") != "warn":
+        return False
+    if status == "missing_integrity":
+        return True
+    if status != "degraded_mode":
+        return False
+    if source != "approval-gate":
+        return False
+    reasons = state.get("degraded_reasons")
+    if not isinstance(reasons, list):
+        return False
+    if not reasons:
+        return False
+    allowed_reasons = {
+        "system_keyring_unavailable",
+        "policy_integrity_key_unavailable",
+        "policy_integrity_control_unavailable",
+    }
+    return all(isinstance(reason, str) and reason in allowed_reasons for reason in reasons)
+
+
 def _family_key_value(family_key: str) -> str:
     if family_key.startswith("family:"):
         return family_key.removeprefix("family:")

{plugin_scanner-2.0.781 → plugin_scanner-2.0.783}/src/codex_plugin_scanner/guard/store_evidence.py

@@ -32,6 +32,24 @@ _EXPORT_COLUMNS: tuple[str, ...] = (
     "created_at",
 )
 _CSV_FORMULA_TRIGGER_PATTERN = re.compile(r"^[=+\-@\t\r\n]")
+_EVIDENCE_LIST_COLUMNS: tuple[str, ...] = (
+    "evidence_id",
+    "action_id",
+    "request_id",
+    "harness",
+    "workspace",
+    "signal_id",
+    "category",
+    "severity",
+    "confidence",
+    "summary",
+    "details_json",
+    "action_identity",
+    "created_at",
+)
+_EVIDENCE_SUMMARY_COLUMNS: tuple[str, ...] = tuple(
+    column for column in _EVIDENCE_LIST_COLUMNS if column != "details_json"
+)
 
 
 def _now_iso() -> str:
@@ -83,6 +101,17 @@ def evidence_index_statements() -> list[str]:
         "create index if not exists idx_evidence_category_severity on guard_evidence(category, severity)",
         "create index if not exists idx_evidence_harness_workspace on guard_evidence(harness, workspace)",
         "create index if not exists idx_evidence_identity on guard_evidence(action_identity)",
+        "create index if not exists idx_evidence_request_created on guard_evidence(request_id, created_at desc)",
+        "create index if not exists idx_evidence_identity_created on guard_evidence(action_identity, created_at desc)",
+        "create index if not exists idx_evidence_harness_created on guard_evidence(harness, created_at desc)",
+        (
+            "create index if not exists idx_evidence_category_severity_created "
+            "on guard_evidence(category, severity, created_at desc)"
+        ),
+        (
+            "create index if not exists idx_evidence_harness_category_severity_created "
+            "on guard_evidence(harness, category, severity, created_at desc)"
+        ),
     ]
 
 
@@ -121,12 +150,19 @@ def ensure_evidence_schema(connection: sqlite3.Connection) -> None:
     _EVIDENCE_SCHEMA_READY.add(cache_key)
 
 
-def _row_to_record(row: sqlite3.Row) -> EvidenceRecord:
-    try:
-        details: dict[str, object] = json.loads(row["details_json"])
-    except (json.JSONDecodeError, TypeError):
+def _row_to_record(row: sqlite3.Row, *, include_details: bool = True) -> EvidenceRecord:
+    details: dict[str, object]
+    if include_details:
+        try:
+            details = json.loads(row["details_json"])
+        except (json.JSONDecodeError, TypeError):
+            details = {}
+    else:
         details = {}
-    columns = set(row.keys())
+    try:
+        columns = set(row.keys())
+    except AttributeError:
+        columns = set(_EVIDENCE_LIST_COLUMNS)
     return EvidenceRecord(
         evidence_id=row["evidence_id"],
         action_id=row["action_id"],
@@ -183,6 +219,7 @@ def list_evidence(
     action_identity: str | None = None,
     before_cursor: str | None = None,
     limit: int = 100,
+    include_details: bool = True,
 ) -> list[EvidenceRecord]:
     clauses: list[str] = []
     params: list[object] = []
@@ -208,11 +245,12 @@ def list_evidence(
 
     where = f"where {' and '.join(clauses)}" if clauses else ""
     params.append(limit)
+    select_columns = ", ".join(_EVIDENCE_LIST_COLUMNS if include_details else _EVIDENCE_SUMMARY_COLUMNS)
     rows = conn.execute(
-        f"select * from guard_evidence {where} order by created_at desc limit ?",
+        f"select {select_columns} from guard_evidence {where} order by created_at desc limit ?",
         params,
     ).fetchall()
-    return [_row_to_record(r) for r in rows]
+    return [_row_to_record(r, include_details=include_details) for r in rows]
 
 
 def search_evidence(
@@ -293,7 +331,7 @@ def export_evidence_payload(
     redact_fields: tuple[str, ...] | None = None,
 ) -> dict[str, object]:
     redact_set = {"details"} if redact_fields is None else set(redact_fields)
-    records = list_evidence(conn, limit=limit)
+    records = list_evidence(conn, limit=limit, include_details="details" not in redact_set)
     rows = [evidence_record_to_dict(record, redact_fields=redact_set) for record in records]
     return {
         "exported_at": _now_iso(),

{plugin_scanner-2.0.781 → plugin_scanner-2.0.783}/src/codex_plugin_scanner/version.py

@@ -1,3 +1,3 @@
 """Single source of truth for tool version."""
 
-__version__ = "2.0.781"
+__version__ = "2.0.783"

{plugin_scanner-2.0.781 → plugin_scanner-2.0.783}/tests/test_cisco_install_surfaces.py

@@ -30,7 +30,7 @@ def test_pyproject_keeps_cisco_mcp_scanner_optional() -> None:
     assert "cisco-ai-skill-scanner==2.0.11" in override_entries
     assert "importlib-metadata==9.0.0" in override_entries
     assert "jsonschema==4.26.0" in override_entries
-    assert "litellm==1.83.7" in override_entries
+    assert "litellm==1.84.0" in override_entries
     assert "openai==2.41.1" in override_entries
     assert "pyjwt==2.13.0" in override_entries
     assert "python-dotenv==1.2.2" in override_entries
@@ -63,7 +63,7 @@ def test_readme_distinguishes_baseline_and_full_cisco_installs() -> None:
     assert 'pip install "hol-guard[cisco]"' in readme
     assert 'pip install "plugin-scanner[cisco]"' in readme
     assert "Python 3.11+" in readme
-    assert "published `litellm==1.83.7` release" in readme
+    assert "published `litellm==1.84.0` release" in readme
     assert "deferred" in readme
     assert "cisco-ai-a2a-scanner" in readme
     assert "cisco-aibom" in readme
@@ -101,7 +101,7 @@ def test_repo_controlled_surfaces_prefer_cisco_extra_where_supported() -> None:
     assert "aiohttp==3.14.1" in docker_requirements
     assert "cisco-ai-mcp-scanner==" in docker_requirements
     assert "importlib-metadata==9.0.0" in docker_requirements
-    assert "litellm==1.83.7" in docker_requirements
+    assert "litellm==1.84.0" in docker_requirements
     assert "python-dotenv==1.2.2" in docker_requirements
     assert "python-multipart==0.0.32" in docker_requirements
     assert "pyjwt==2.13.0" in docker_requirements

{plugin_scanner-2.0.781 → plugin_scanner-2.0.783}/tests/test_guard_daemon_repair_perf.py

@@ -240,6 +240,31 @@ class TestReceiptAnalyticsIndexes:
         assert "idx_receipts_harness_artifact" in names
         assert "idx_receipts_timestamp_harness" in names
         assert "idx_receipts_timestamp_desc" in names
+        assert "idx_receipts_harness_timestamp_desc" in names
+        assert "idx_receipts_harness_artifact_timestamp_desc" in names
+
+    def test_receipt_listing_queries_use_ordered_indexes(self, tmp_path) -> None:
+        store = GuardStore(tmp_path / "guard-home")
+        with store._connect() as connection:
+            harness_plan = connection.execute(
+                "explain query plan "
+                + store._receipt_base_query("where r.harness = ? order by r.timestamp desc limit ?"),
+                ("codex", 200),
+            ).fetchall()
+            artifact_plan = connection.execute(
+                "explain query plan "
+                + store._receipt_base_query(
+                    "where r.harness = ? and r.artifact_id = ? order by r.timestamp desc limit 1"
+                ),
+                ("codex", "codex:project:tool"),
+            ).fetchall()
+
+        harness_detail = " ".join(str(row["detail"]) for row in harness_plan)
+        artifact_detail = " ".join(str(row["detail"]) for row in artifact_plan)
+        assert "idx_receipts_harness_timestamp_desc" in harness_detail
+        assert "idx_receipts_harness_artifact_timestamp_desc" in artifact_detail
+        assert "USE TEMP B-TREE" not in harness_detail
+        assert "USE TEMP B-TREE" not in artifact_detail
 
     def test_guard_store_creates_receipt_rollup_tables(self, tmp_path) -> None:
         store = GuardStore(tmp_path / "guard-home")

{plugin_scanner-2.0.781 → plugin_scanner-2.0.783}/tests/test_guard_evidence_api_contract.py

@@ -8,6 +8,7 @@ import urllib.request
 from pathlib import Path
 
 from codex_plugin_scanner.guard.daemon import GuardDaemonServer
+from codex_plugin_scanner.guard.models import GuardReceipt
 from codex_plugin_scanner.guard.store import GuardStore
 from codex_plugin_scanner.guard.store_evidence import EvidenceRecord, store_evidence
 
@@ -37,6 +38,22 @@ def _store_record(store: GuardStore, record: EvidenceRecord) -> None:
         store_evidence(connection, record)
 
 
+def _receipt(receipt_id: str, *, harness: str, timestamp: str) -> GuardReceipt:
+    return GuardReceipt(
+        receipt_id=receipt_id,
+        harness=harness,
+        artifact_id=f"{harness}:project:{receipt_id}",
+        artifact_hash=f"sha256:{receipt_id}",
+        policy_decision="allow",
+        capabilities_summary="file-read",
+        changed_capabilities=("file-read",),
+        provenance_summary="test receipt",
+        artifact_name=f"tool-{receipt_id}",
+        source_scope="artifact",
+        timestamp=timestamp,
+    )
+
+
 def _get(port: int, path: str, *, token: str | None = None) -> tuple[int, dict[str, str], bytes]:
     headers: dict[str, str] = {}
     if token is not None:
@@ -74,6 +91,28 @@ def test_evidence_list_total_respects_filters(tmp_path: Path) -> None:
     payload = json.loads(body.decode("utf-8"))
     assert payload["total"] == 1
     assert [item["evidence_id"] for item in payload["items"]] == ["codex-high"]
+    assert "details" not in payload["items"][0]
+
+
+def test_receipts_list_accepts_harness_and_limit_query(tmp_path: Path) -> None:
+    store = GuardStore(tmp_path / "guard-home")
+    store.add_receipt(_receipt("codex-old", harness="codex", timestamp="2026-05-12T09:00:00Z"))
+    store.add_receipt(_receipt("claude-new", harness="claude", timestamp="2026-05-12T11:00:00Z"))
+    store.add_receipt(_receipt("codex-new", harness="codex", timestamp="2026-05-12T12:00:00Z"))
+    daemon = GuardDaemonServer(store, host="127.0.0.1", port=0)
+    daemon.start()
+
+    try:
+        _status, _headers, body = _get(
+            daemon.port,
+            "/v1/receipts?harness=codex&limit=1",
+            token=daemon._server.auth_token,
+        )
+    finally:
+        daemon.stop()
+
+    payload = json.loads(body.decode("utf-8"))
+    assert [item["receipt_id"] for item in payload["items"]] == ["codex-new"]
 
 
 def test_evidence_export_json_and_csv_include_warning_and_redaction(tmp_path: Path) -> None:

{plugin_scanner-2.0.781 → plugin_scanner-2.0.783}/tests/test_guard_evidence_store.py

@@ -72,6 +72,11 @@ class TestSchema:
         assert "idx_evidence_category_severity" in names
         assert "idx_evidence_harness_workspace" in names
         assert "idx_evidence_identity" in names
+        assert "idx_evidence_request_created" in names
+        assert "idx_evidence_identity_created" in names
+        assert "idx_evidence_harness_created" in names
+        assert "idx_evidence_category_severity_created" in names
+        assert "idx_evidence_harness_category_severity_created" in names
 
     def test_indexes_idempotent(self, tmp_path: Path) -> None:
         conn = _db(tmp_path)
@@ -167,6 +172,15 @@ class TestListEvidence:
         records = list_evidence(conn, request_id="req-A")
         assert len(records) == 1
 
+    def test_list_can_skip_details_json_for_redacted_api_rows(self, tmp_path: Path) -> None:
+        conn = _db(tmp_path)
+        store_evidence(conn, _rec(evidence_id="e1", details={"secret": "not loaded"}))
+
+        records = list_evidence(conn, include_details=False)
+
+        assert len(records) == 1
+        assert records[0].details == {}
+
     def test_list_order_desc(self, tmp_path: Path) -> None:
         conn = _db(tmp_path)
         for i in range(5):
@@ -229,6 +243,14 @@ class TestCountEvidence:
         store_evidence(conn, _rec(evidence_id="e2", category="injection"))
         assert count_evidence(conn, category="exfiltration") == 1
 
+    def test_count_filter_harness_category_severity(self, tmp_path: Path) -> None:
+        conn = _db(tmp_path)
+        store_evidence(conn, _rec(evidence_id="e1", harness="codex", category="secret", severity="high"))
+        store_evidence(conn, _rec(evidence_id="e2", harness="codex", category="secret", severity="low"))
+        store_evidence(conn, _rec(evidence_id="e3", harness="claude", category="secret", severity="high"))
+
+        assert count_evidence(conn, harness="codex", category="secret", severity="high") == 1
+
 
 class TestExportEvidence:
     def test_export_returns_privacy_envelope(self, tmp_path: Path) -> None:
@@ -355,6 +377,51 @@ class TestActionIdentityField:
 
 
 class TestLargeScalePagination:
+    def test_filtered_evidence_pages_use_ordered_indexes(self, tmp_path: Path) -> None:
+        conn = _db(tmp_path)
+        query_prefix = (
+            "select evidence_id, action_id, request_id, harness, workspace, signal_id, category, severity, "
+            "confidence, summary, action_identity, created_at from guard_evidence "
+        )
+        cases = [
+            (
+                "harness",
+                query_prefix + "where harness = ? order by created_at desc limit ?",
+                ("codex", 100),
+                "idx_evidence_harness_created",
+            ),
+            (
+                "category/severity",
+                query_prefix + "where category = ? and severity = ? order by created_at desc limit ?",
+                ("secret", "high", 100),
+                "idx_evidence_category_severity_created",
+            ),
+            (
+                "harness/category/severity",
+                query_prefix
+                + "where harness = ? and category = ? and severity = ? order by created_at desc limit ?",
+                ("codex", "secret", "high", 100),
+                "idx_evidence_harness_category_severity_created",
+            ),
+            (
+                "request",
+                query_prefix + "where request_id = ? order by created_at desc limit ?",
+                ("req-1", 100),
+                "idx_evidence_request_created",
+            ),
+            (
+                "identity",
+                query_prefix + "where action_identity = ? order by created_at desc limit ?",
+                ("codex:tool:bash", 100),
+                "idx_evidence_identity_created",
+            ),
+        ]
+        for label, query, params, index_name in cases:
+            plan = conn.execute(f"explain query plan {query}", params).fetchall()
+            detail = " ".join(str(row["detail"]) for row in plan)
+            assert index_name in detail, f"{label} plan did not use {index_name}: {detail}"
+            assert "USE TEMP B-TREE" not in detail, f"{label} plan sorted in a temp b-tree: {detail}"
+
     def test_first_page_reads_bounded_slice_from_100k_records(self, tmp_path: Path) -> None:
         conn = _db(tmp_path)
         total = 100_000