badger/docs/adr/ at main · jenchan.biz/badger · Tangled

jenchan.biz / badger

0

Prompt-injection defenses for LLM agents — fetch interception, output sanitization, session inspection.

0

badger / docs / adr /

at main 1 file

Jen Chan docs: record canary detection plan + worktree include config 4w ago

0001-canary-detects-planted-marker-not-system-prompt.md

docs: record canary detection plan + worktree include config - CONTEXT.md: define Canary + canary_leak, replacing the prompt_revealed overclaim (badger can't plant into the host's real system prompt) - docs/adr/0001: ADR for canary-detects-a-planted-marker, silent+opaque, persisted-on-disk bounded risk, host asymmetry - .worktreeinclude + .gitignore: copy local config/scratch (.env, docs/issues, docs/plans, .claude/settings.local, .badger) into isolated agent worktrees; ignore .claude/worktrees - naming.md: session-inspector → inspector; opencode.json: add fetch / approve_llm_analysis commands Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

4 weeks ago