Add isolated Ghost Twin execution boundary by cryptofixyup · Pull Request #11 · cryptofixyup/SentinelAI

cryptofixyup · 2026-09-24T09:50:55Z

Integrates the supplied Ghost + Twin concept as an isolated Rust workspace crate.

TradeIntent boundary
deterministic Twin paper/shadow fill
fail-closed ExecutionGate with live execution disabled by default
Sentinel core risk decision consumed before execution
no signing/key management
no external network calls in the crate

Jito remains an outer adapter boundary and is not implemented here.

ecc-tools · 2026-09-24T09:51:00Z

ECC Tools / Security Evidence

Commit: bcd512b3056fffd17a4eda03b5b8e38ff8bf7699

Security evidence gate passed (success)

No security-sensitive scanner-evidence gap detected.

Mode: enforce

Scanned 4 changed file(s). No missing scanner-evidence signal was detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:51:01Z

ECC Tools / PR Risk Taxonomy

Commit: bcd512b3056fffd17a4eda03b5b8e38ff8bf7699

PR taxonomy clear (success)

Scanned 4 changed file(s). No taxonomy bucket signals were detected.

Scanned 4 changed file(s).

No PR taxonomy bucket signals were detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

vercel · 2026-09-24T09:51:01Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
api	Ready	Preview	Sep 24, 2026 9:55am UTC

ecc-tools · 2026-09-24T09:51:02Z

ECC Tools / Reference Set Readiness

Commit: bcd512b3056fffd17a4eda03b5b8e38ff8bf7699

Reference set readiness gaps detected (neutral)

Reference evidence present for 0/7 areas (0%) across 4 changed file(s).

This check is based on files changed in this PR. Repository-level readiness is still reported by /ecc-tools analyze comments and generated manifests.

Area	Status	Evidence / Next Step
Deep analyzer corpus	Missing	Add analyzer fixture, golden, benchmark, or reference-set files that can catch analyzer regressions.
RAG/evaluator comparison	Missing	Add retrieval or evaluator reference-set comparison fixtures with expected ranking behavior.
PR salvage/review corpus	Missing	Add stale-PR, review-thread, reopen-flow, or salvage reference cases for queue cleanup automation.
Discussion triage corpus	Missing	Add public discussion triage fixtures, golden cases, or reference sets for informational, answered, and no-response classifications.
Harness compatibility	Missing	Add cross-harness, adapter-compliance, or harness-audit evidence for Claude, Codex, OpenCode, Zed, dmux, and agent surfaces.
Security evidence	Missing	Attach security evidence such as SBOMs, SARIF, audit reports, or AgentShield evidence packs.
CI failure-mode evidence	Missing	Add captured CI failure logs, dry-run fixtures, or troubleshooting docs for common workflow failure modes.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:51:03Z

ECC Tools / Hosted Promotion Readiness

Commit: bcd512b3056fffd17a4eda03b5b8e38ff8bf7699

Hosted promotion readiness passed (success)

No hosted promotion evidence gaps detected across 4 changed file(s); 0 corpus scenarios had matching evidence.

This check compares PR file changes against the evaluator/RAG promotion corpus in src/analyzers/fixtures/evaluator-rag-corpus.ts.
Hosted output scoring inspected 0 completed cached hosted job results.

No evaluator corpus scenarios matched this PR.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

coderabbitai · 2026-09-24T09:51:07Z

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: c81a21c6-167c-421e-a969-4a8037c30edc

📥 Commits

Reviewing files that changed from the base of the PR and between c7ed1a2 and bcd512b.

📒 Files selected for processing (4)

Cargo.toml
crates/ghost-twin/Cargo.toml
crates/ghost-twin/README.md
crates/ghost-twin/src/lib.rs

 ______________________________________________________________
< I had to scroll so far I hit the heat death of the universe. >
 --------------------------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

✨ Finishing Touches

📝 Generate docstrings

Commit to this branch
Create a new PR

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

ecc-tools · 2026-09-24T09:54:13Z

ECC Tools / Security Evidence

Commit: 7956cc3e744593c33bb0afe0d1505e3da595f680

Security evidence gate passed (success)

No security-sensitive scanner-evidence gap detected.

Mode: enforce

Scanned 4 changed file(s). No missing scanner-evidence signal was detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:54:14Z

ECC Tools / PR Risk Taxonomy

Commit: 7956cc3e744593c33bb0afe0d1505e3da595f680

PR taxonomy clear (success)

Scanned 4 changed file(s). No taxonomy bucket signals were detected.

Scanned 4 changed file(s).

No PR taxonomy bucket signals were detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:54:16Z

ECC Tools / Reference Set Readiness

Commit: 7956cc3e744593c33bb0afe0d1505e3da595f680

Reference set readiness gaps detected (neutral)

Reference evidence present for 0/7 areas (0%) across 4 changed file(s).

This check is based on files changed in this PR. Repository-level readiness is still reported by /ecc-tools analyze comments and generated manifests.

Area	Status	Evidence / Next Step
Deep analyzer corpus	Missing	Add analyzer fixture, golden, benchmark, or reference-set files that can catch analyzer regressions.
RAG/evaluator comparison	Missing	Add retrieval or evaluator reference-set comparison fixtures with expected ranking behavior.
PR salvage/review corpus	Missing	Add stale-PR, review-thread, reopen-flow, or salvage reference cases for queue cleanup automation.
Discussion triage corpus	Missing	Add public discussion triage fixtures, golden cases, or reference sets for informational, answered, and no-response classifications.
Harness compatibility	Missing	Add cross-harness, adapter-compliance, or harness-audit evidence for Claude, Codex, OpenCode, Zed, dmux, and agent surfaces.
Security evidence	Missing	Attach security evidence such as SBOMs, SARIF, audit reports, or AgentShield evidence packs.
CI failure-mode evidence	Missing	Add captured CI failure logs, dry-run fixtures, or troubleshooting docs for common workflow failure modes.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:54:17Z

ECC Tools / Hosted Promotion Readiness

Commit: 7956cc3e744593c33bb0afe0d1505e3da595f680

Hosted promotion readiness passed (success)

No hosted promotion evidence gaps detected across 4 changed file(s); 0 corpus scenarios had matching evidence.

This check compares PR file changes against the evaluator/RAG promotion corpus in src/analyzers/fixtures/evaluator-rag-corpus.ts.
Hosted output scoring inspected 0 completed cached hosted job results.

No evaluator corpus scenarios matched this PR.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:54:20Z

ECC Tools / Security Evidence

Commit: e8169b36165fc5af8a5647e65f478b9ff1b09605

Security evidence gate passed (success)

No security-sensitive scanner-evidence gap detected.

Mode: enforce

Scanned 5 changed file(s). No missing scanner-evidence signal was detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:54:22Z

ECC Tools / PR Risk Taxonomy

Commit: e8169b36165fc5af8a5647e65f478b9ff1b09605

PR taxonomy review recommended (neutral)

Detected 2 PR taxonomy bucket(s): Security Evidence, CI/CD Recommendation.

Scanned 5 changed file(s).

Roadmap taxonomy buckets:

Security Evidence

Security-sensitive changes should carry explicit scanner, code-scanning, or focused regression evidence.

Signals:

1 security-sensitive path(s) changed

Paths:

.github/workflows/rust-workspace.yml

CI/CD Recommendation

CI, dependency, coverage, and contract signals should be routed into follow-up checks or verification work.

Signals:

CI workflow changes may ship without failure-mode evidence
Dependency or CI drift could surface after merge
1 CI or workflow path(s) changed

Paths:

.github/workflows/rust-workspace.yml
Cargo.toml
crates/ghost-twin/Cargo.toml
crates/ghost-twin/src/lib.rs

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:54:23Z

ECC Tools / Reference Set Readiness

Commit: e8169b36165fc5af8a5647e65f478b9ff1b09605

Reference set readiness gaps detected (neutral)

Reference evidence present for 0/7 areas (0%) across 5 changed file(s).

This check is based on files changed in this PR. Repository-level readiness is still reported by /ecc-tools analyze comments and generated manifests.

Area	Status	Evidence / Next Step
Deep analyzer corpus	Missing	Add analyzer fixture, golden, benchmark, or reference-set files that can catch analyzer regressions.
RAG/evaluator comparison	Missing	Add retrieval or evaluator reference-set comparison fixtures with expected ranking behavior.
PR salvage/review corpus	Missing	Add stale-PR, review-thread, reopen-flow, or salvage reference cases for queue cleanup automation.
Discussion triage corpus	Missing	Add public discussion triage fixtures, golden cases, or reference sets for informational, answered, and no-response classifications.
Harness compatibility	Missing	Add cross-harness, adapter-compliance, or harness-audit evidence for Claude, Codex, OpenCode, Zed, dmux, and agent surfaces.
Security evidence	Missing	Attach security evidence such as SBOMs, SARIF, audit reports, or AgentShield evidence packs.
CI failure-mode evidence	Missing	Add captured CI failure logs, dry-run fixtures, or troubleshooting docs for common workflow failure modes.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:54:24Z

ECC Tools / Hosted Promotion Readiness

Commit: e8169b36165fc5af8a5647e65f478b9ff1b09605

Hosted promotion readiness passed (success)

No hosted promotion evidence gaps detected across 5 changed file(s); 0 corpus scenarios had matching evidence.

This check compares PR file changes against the evaluator/RAG promotion corpus in src/analyzers/fixtures/evaluator-rag-corpus.ts.
Hosted output scoring inspected 0 completed cached hosted job results.

No evaluator corpus scenarios matched this PR.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:54:26Z

ECC Tools / PR Config Audit

Commit: e8169b36165fc5af8a5647e65f478b9ff1b09605

No changed-config issues detected (success)

Scanned 1 config file(s) present at this commit across 1 changed config path(s) and found no issues in the supported security rules.

Changed config files:

.github/workflows/rust-workspace.yml

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:54:27Z

ECC Tools / PR Harness Audit

Commit: e8169b36165fc5af8a5647e65f478b9ff1b09605

No harness issues detected (success)

Scanned 1 changed config file(s) and found no harness issues.

Changed config files:

.github/workflows/rust-workspace.yml

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:54:54Z

ECC Tools / Security Evidence

Commit: cffdef3d845a41a0c51bf2a4eb8825d9c0632d47

Security evidence gate passed (success)

No security-sensitive scanner-evidence gap detected.

Mode: enforce

Scanned 6 changed file(s). No missing scanner-evidence signal was detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:54:55Z

ECC Tools / PR Risk Taxonomy

Commit: cffdef3d845a41a0c51bf2a4eb8825d9c0632d47

PR taxonomy review recommended (neutral)

Detected 2 PR taxonomy bucket(s): Security Evidence, CI/CD Recommendation.

Scanned 6 changed file(s).

Roadmap taxonomy buckets:

Security Evidence

Security-sensitive changes should carry explicit scanner, code-scanning, or focused regression evidence.

Signals:

1 security-sensitive path(s) changed

Paths:

.github/workflows/rust-workspace.yml

CI/CD Recommendation

CI, dependency, coverage, and contract signals should be routed into follow-up checks or verification work.

Signals:

Regression coverage may lag behind the diff
CI workflow changes may ship without failure-mode evidence
Dependency or CI drift could surface after merge
1 CI or workflow path(s) changed

Paths:

.github/workflows/rust-workspace.yml
Cargo.toml
crates/ghost-twin/Cargo.toml
crates/ghost-twin/src/lib.rs
crates/sentinel-core/src/lib.rs

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:54:56Z

ECC Tools / Reference Set Readiness

Commit: cffdef3d845a41a0c51bf2a4eb8825d9c0632d47

Reference set readiness gaps detected (neutral)

Reference evidence present for 0/7 areas (0%) across 6 changed file(s).

This check is based on files changed in this PR. Repository-level readiness is still reported by /ecc-tools analyze comments and generated manifests.

Area	Status	Evidence / Next Step
Deep analyzer corpus	Missing	Add analyzer fixture, golden, benchmark, or reference-set files that can catch analyzer regressions.
RAG/evaluator comparison	Missing	Add retrieval or evaluator reference-set comparison fixtures with expected ranking behavior.
PR salvage/review corpus	Missing	Add stale-PR, review-thread, reopen-flow, or salvage reference cases for queue cleanup automation.
Discussion triage corpus	Missing	Add public discussion triage fixtures, golden cases, or reference sets for informational, answered, and no-response classifications.
Harness compatibility	Missing	Add cross-harness, adapter-compliance, or harness-audit evidence for Claude, Codex, OpenCode, Zed, dmux, and agent surfaces.
Security evidence	Missing	Attach security evidence such as SBOMs, SARIF, audit reports, or AgentShield evidence packs.
CI failure-mode evidence	Missing	Add captured CI failure logs, dry-run fixtures, or troubleshooting docs for common workflow failure modes.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:54:57Z

ECC Tools / Hosted Promotion Readiness

Commit: cffdef3d845a41a0c51bf2a4eb8825d9c0632d47

Hosted promotion readiness passed (success)

No hosted promotion evidence gaps detected across 6 changed file(s); 0 corpus scenarios had matching evidence.

This check compares PR file changes against the evaluator/RAG promotion corpus in src/analyzers/fixtures/evaluator-rag-corpus.ts.
Hosted output scoring inspected 0 completed cached hosted job results.

No evaluator corpus scenarios matched this PR.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:54:59Z

ECC Tools / PR Config Audit

Commit: cffdef3d845a41a0c51bf2a4eb8825d9c0632d47

No changed-config issues detected (success)

Scanned 1 config file(s) present at this commit across 1 changed config path(s) and found no issues in the supported security rules.

Changed config files:

.github/workflows/rust-workspace.yml

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-09-24T09:55:00Z

ECC Tools / PR Harness Audit

Commit: cffdef3d845a41a0c51bf2a4eb8825d9c0632d47

No harness issues detected (success)

Scanned 1 changed config file(s) and found no harness issues.

Changed config files:

.github/workflows/rust-workspace.yml

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

cryptofixyup added 4 commits September 24, 2026 11:50

Add Ghost Twin execution crate

1b45655

Add deterministic Ghost Twin gate

f7d8275

Document Ghost Twin boundary

3935fc0

Register Ghost Twin workspace member

bcd512b

vercel Bot deployed to Preview September 24, 2026 09:51 View deployment

Harden Ghost Twin live gate

7956cc3

Add Rust workspace validation gate

e8169b3

vercel Bot deployed to Preview September 24, 2026 09:54 View deployment

Fix const atomic decision compile error

cffdef3

vercel Bot deployed to Preview September 24, 2026 09:55 View deployment

cryptofixyup merged commit 8cb4cd0 into main Sep 24, 2026
6 of 7 checks passed

Conversation

cryptofixyup commented Sep 24, 2026

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / Security Evidence

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / PR Risk Taxonomy

Uh oh!

vercel Bot commented Sep 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / Reference Set Readiness

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / Hosted Promotion Readiness

Uh oh!

coderabbitai Bot commented Sep 24, 2026

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / Security Evidence

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / PR Risk Taxonomy

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / Reference Set Readiness

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / Hosted Promotion Readiness

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / Security Evidence

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / PR Risk Taxonomy

Security Evidence

CI/CD Recommendation

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / Reference Set Readiness

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / Hosted Promotion Readiness

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / PR Config Audit

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / PR Harness Audit

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / Security Evidence

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / PR Risk Taxonomy

Security Evidence

CI/CD Recommendation

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / Reference Set Readiness

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / Hosted Promotion Readiness

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / PR Config Audit

Uh oh!

ecc-tools Bot commented Sep 24, 2026

ECC Tools / PR Harness Audit

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

vercel Bot commented Sep 24, 2026 •

edited

Loading