repo-a-telemetry-kv-guard

What problem does it solve?

Protect Repo A telemetry privacy by validating append-only NDJSON behavior, signed telemetry envelopes, and encrypted KV storage.

Core Features & Use Cases

• Preserve append-only repo_c_trace NDJSON behavior.
• Keep telemetry envelopes signed when configured.
• Enforce Repo C privacy class and TTL gating at role entry.
• Preserve encrypted KV paging behavior (AES-GCM + TTL enforcement).
• Avoid storing raw prompts/responses or PII at rest.

Quick Start

Run the telemetry and KV guard checks from the repository root to validate policy enforcement.