kepr / 48661a38ed5d

Phase E: tighten binary-blob detection — exclude build outputs/caches (zig-out, zig-cache, .zig-cache, zig-pkg) from scanning via isExcludedFromScan + isExpectedBinaryPath; add .db/.sqlite/.sqlite3/.bz2/.xz/.7z to known-safe binary extensions; ELF/Mach-O/PE in real source paths still flagged HIGH; v1.55.4

dev · 14 weeks ago · 2026-06-09 · 13.9 MB

session: safety redesign · agent: claude-opus-4-8

parent: b4fd1a41af4f