Summary
Two governed promotions landed on the Kinetic Labs master line to harden validation and refusal behavior.
What changed
- Refusal coverage for unsafe ZIP export behavior patterns was added.
- The ValidX validation wrapper was set as the canonical entrypoint for this validator lane.
Why it matters
These changes strengthen fail-closed behavior before broader proof-program expansion.
Next steps
- Execute P1 contracts and enforcement gates in small, scoped promotions.
- Continue receipt-first validation stage rollout under governed CI.