v0.1.2policy-scout2026-06-10

Registry self-integrity checks on startup

Policy Scout now verifies SHA-256 checksums of its own bundled data files at startup, catching tampered registries before any decision is made.

v0.1.22026-06-10
  • ·registry_manifest.json ships SHA-256 of every bundled YAML; generate_registry_manifest.py regenerates it at build time
  • ·startup_check.py runs on each invocation and reports which files are missing, tampered, or unverifiable
  • ·doctor integrates the integrity report alongside its existing health checks
  • ·self-tamper is classified as DENY_AND_ALERT — a tool providing false assurance is worse than no tool