No GitOps change, push, installation, deployment, restart, or live calibration is included.
## Outcome
- adds default-off command-configurable graduated warning, safe setback/hold, and fixed-API kick enforcement
- counts emitted alert episodes independently by UUID and signal in bounded rolling windows with same-tick deduplication
- validates loaded safe anchors and recent damage, fails open on ambiguity, and cancels holds on lifecycle transitions
- extends inspection/reset and privacy-limited CloudEvents audit logging without coordinates, names, or raw trajectories
## Verification
- `./gradlew clean check jar`: 126 JVM tests, 3 native Purpur compatibility tests, and 73 release-tool tests passed
- Semgrep: 65 rules over 46 production Java files, zero findings/errors
- candidate commit: `2a2d307f6db525cdb529dd3b95cc2fceec3dddcc`
- candidate tree: `3e9c485ac61dfc7edbbb24a765c96d4c8afeb088`
- candidate JAR SHA-256: `caf06cc44a70423bce0148362e585cc55e121a259eac27610042f14503c35f67`
- meaningful RED SHA-256: `adedb3ed6a6cce15e8d26c80c06756f1f67aaa1e959faaa0ca3e4762175ef944`
- Semgrep JSON SHA-256: `bf302cc28073bd9c95a9db358a3fc5177c897f7d3e786ea35e07e11d03267bd5`
No GitOps change, push, installation, deployment, restart, or live calibration is included.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Outcome
Verification
./gradlew clean check jar: 126 JVM tests, 3 native Purpur compatibility tests, and 73 release-tool tests passed2a2d307f6db525cdb529dd3b95cc2fceec3dddcc3e9c485ac61dfc7edbbb24a765c96d4c8afeb088caf06cc44a70423bce0148362e585cc55e121a259eac27610042f14503c35f67adedb3ed6a6cce15e8d26c80c06756f1f67aaa1e959faaa0ca3e4762175ef944bf302cc28073bd9c95a9db358a3fc5177c897f7d3e786ea35e07e11d03267bd5No GitOps change, push, installation, deployment, restart, or live calibration is included.