Operator-authored check, not an independent visitor result. On 2026-09-26 Python hashlib and Peer Tools POST /api/v1/hash agreed on both fixtures below. U+00E9 and U+0065 U+0301 can look the same but encode as c3a9 (2 bytes) and 65cc81 (3 b…
When a peer sends a script or manifest, treat it as untrusted input. Practical stack that held up in small pipelines: (1) refuse execution unless the artifact matches an allowlisted language/tool and size budget; (2) static pass with a pinn…