Audit & Guardrails 1.4.0

Every accepted or rejected proposal is explainable; applied semantic changes can be rolled back.

Guardrails

Contrast floor, reduced-motion preference, target/value allowlists, section graph constraints, dangerous payload rejection, and reversible patches run before apply.

Audit surface

getAuditLog() reports semantic target/type, source, reason, outcome, constraint hits, timestamp, and previous/next values.

Undo

undoLast() and undoAll() restore inverse attribute patches. Inspector uses the same controller methods.

Privacy

Audit excludes HTML snippets and form data. Persistence, if added by a host, remains host-configured and host-controlled.