Config subsystem (koanf): typed config, fail-closed, no self-disable knob#7

Open

Tombar wants to merge 7 commits into

mode-namespace-renamefrom

Commits on Jun 16, 2026

config: koanf loader + typed Config + fail-closed Validate (no config = defaults)

Tombar
and
claude
committed
hook: build mode chain + logger + paths from config.Config (defaults = identical behavior)

Tombar
and
claude
committed
cli: thread config.Config into toggle/mode/trust/tools/report (paths from one source)

Tombar
and
claude
committed
config: drop mode.default knob — default guard mode is always enabled (hardcoded, no self-disable vector)

Tombar
and
claude
committed
config: telemetry stub (off by default), configuration docs + CHANGELOG, self-protection note + fs-guard roadmap

Tombar
and
claude
committed
config: fix multi-word env var mapping (static key table; FAILSAFE_*_*_* now honored)

Tombar
and
claude
committed
fix(config): wire 'log' subcommand to cfg.Log.Path (integration after rebase onto report/log #10)
Tombar
committed