Search results

security: embedding vector is outside the integrity hash and mutable by jeli_app — retrieval poisoning passes verify_chain

Status: Open.

#56 In LegionForge/jeli;

· jp-cruz opened on Jul 10, 2026

security: constitutional rules can be silently vacuous — add_rule doesn't validate required params, gates fail open on missing fields

Status: Open.

#54 In LegionForge/jeli;

· jp-cruz opened on Jul 10, 2026

security: export/import round-trip silently drops the quarantine wrap for LLM-flagged (natural-language) injection

Status: Open.

#53 In LegionForge/jeli;

· jp-cruz opened on Jul 10, 2026

security: get_entity_graph bypasses the constitutional ReadGate (GH #36 class, derived-data leak)

Status: Open.

#52 In LegionForge/jeli;

· jp-cruz opened on Jul 10, 2026

judicial: precedent is never applied to outcomes, and 0.7+ precedents can't be overturned (semantics review, non-blocking)

Status: Open.

#50 In LegionForge/jeli;

· jp-cruz opened on Jul 10, 2026

design: quarantine-lab sequestered store + separate analyzers + signed in-situ testing flag

Status: Open.

#48 In LegionForge/jeli;

· jp-cruz opened on Jul 10, 2026

security: MINJA-style cross-turn retrieval-poisoning (arXiv:2503.03704) — distinct from #33, non-blocking design capture

Status: Open.

#44 In LegionForge/jeli;

· jp-cruz opened on Jul 9, 2026

security: regex injection detector has false-negative gap for natural-language rephrasing (LLM-based detection needed)

Status: Open.

#33 In LegionForge/jeli;

· jp-cruz opened on Jul 6, 2026