AGSSH-STD-001 conformance runner — deterministic air-gapped static-surface hardening (egress/CSP/headers/DNS) with signed evidence - View it on GitHub