internal/

Package corpus holds the command-safety classifier's versioned Codex-parity evaluation corpus: independently worded synthetic scenarios, each paired with the assessment a correct classifier should produce and the resulting end-to-end eligibility, plus a short record of how the case compares to the corresponding Codex Guardian scenario (design §22.6/§22.7).

Package evidence implements the command-safety classifier's read-only evidence-tool pack (design doc §13.2): bounded filesystem inspection (path.go), bounded Git repository inspection (git.go), an injectable repository-visibility seam (visibility.go), and the catalog that wires them into Harness's tool.Definition/hustle.EvidenceToolPolicy contracts (catalog.go).

Package policy holds the gate.command-safety classifier's own deterministic command-safety consistency policy.

Package prompt holds the immutable system prompt for the gate.command-safety classifier.

Package wire implements the command-safety classifier's strict, versioned JSON codecs for the model's input and output payloads: MarshalInput (input.go) projects a validated gate.PermissionReviewSubject into the bounded, versioned JSON the model sees as evidence, and DecodeOutput (output.go) strictly decodes and validates the model's structured-output verdict back into a gate.PermissionAssessment.