- tests/sealed.rs: a group declares a sealed [[routes]] template; a descendant that suppresses it still serves the path, apply warns "sealed — no effect", routes ls --group shows sealed=true, and sealing an [app] route is rejected. - docs: §4.5 trust-model callout + CLAUDE.md move `sealed` from Deferred to implemented — group templates are advisory-by-default *unless* sealed. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
6.0 KiB
6.0 KiB