https://bot-marshal.sh/https://bot-marshal.sh/adr/https://bot-marshal.sh/adr/0001-record-architecture-decisions/https://bot-marshal.sh/adr/0002-workspace-with-a-dependency-free-core/https://bot-marshal.sh/adr/0003-policy-as-a-short-circuiting-chain/https://bot-marshal.sh/adr/0004-default-deny-lives-in-config/https://bot-marshal.sh/adr/0005-rustls-and-a-split-http-stack/https://bot-marshal.sh/adr/0006-cel-for-the-rules-layer/https://bot-marshal.sh/adr/0007-bodies-stream-by-default/https://bot-marshal.sh/adr/0008-interception-is-mandatory/https://bot-marshal.sh/adr/0009-identity-is-derived-from-the-connection/https://bot-marshal.sh/adr/0010-resolve-once-connect-to-the-checked-address/https://bot-marshal.sh/adr/0011-secrets-are-injected-at-the-boundary/https://bot-marshal.sh/adr/0012-the-judge-sees-data-never-instructions/https://bot-marshal.sh/adr/0013-mcp-denials-are-protocol-errors/https://bot-marshal.sh/adr/0014-netns-isolation-without-cap-net-admin/https://bot-marshal.sh/adr/0015-the-cgroup-name-is-the-registration/https://bot-marshal.sh/adr/0016-config-splits-by-convention/https://bot-marshal.sh/adr/0017-the-fallback-profile-is-embedded/https://bot-marshal.sh/adr/0018-profiles-do-not-inherit/https://bot-marshal.sh/adr/0019-log-detail-sink-and-format-are-independent/https://bot-marshal.sh/adr/0020-reload-builds-everything-before-swapping/https://bot-marshal.sh/adr/0021-identity-not-session/https://bot-marshal.sh/adr/0022-remove-transparent-capture/https://bot-marshal.sh/adr/0023-multi-port-explicit-listeners/https://bot-marshal.sh/adr/0024-netns-binds-an-explicit-allowlist/https://bot-marshal.sh/adr/0025-basic-auth-aware-secret-injection/https://bot-marshal.sh/adr/0026-blind-credential-injection/https://bot-marshal.sh/adr/0027-secret-injection-is-unconditional-only/https://bot-marshal.sh/adr/0028-sigv4-buffers-the-body/https://bot-marshal.sh/adr/0029-the-redaction-set-is-learned-at-runtime/https://bot-marshal.sh/adr/0030-oauth2-is-a-secret-source/https://bot-marshal.sh/adr/0031-a-responder-may-answer-a-request/https://bot-marshal.sh/adr/0032-marshal-owns-the-pkce-verifier/https://bot-marshal.sh/adr/0033-the-env-file-is-an-overlay-not-the-environment/https://bot-marshal.sh/adr/0034-bootstrap-capture-reads-the-token-exchange/https://bot-marshal.sh/adr/0035-release-versioning-uses-cocogitto-not-release-plz/https://bot-marshal.sh/adr/0036-bind-groups-are-named-and-shared-like-bundles/https://bot-marshal.sh/adr/0037-identity-and-profile-are-independent/https://bot-marshal.sh/adr/0038-a-second-source-can-read-another-swaps-id-token/https://bot-marshal.sh/adr/0039-oauth2-can-exchange-a-token-before-caching-it/https://bot-marshal.sh/adr/0040-header-filtering-is-allow-or-deny-never-both/https://bot-marshal.sh/adr/0041-llm-router-may-connect-to-a-mapped-origin/https://bot-marshal.sh/adr/0042-native-decision-answers-may-replace-judge-tool-calls/https://bot-marshal.sh/capture/https://bot-marshal.sh/cli/https://bot-marshal.sh/concepts/https://bot-marshal.sh/configuration/https://bot-marshal.sh/configuration/bind-groups/https://bot-marshal.sh/configuration/bundles/https://bot-marshal.sh/configuration/decision-apis/https://bot-marshal.sh/configuration/identity/https://bot-marshal.sh/configuration/llm-routing/https://bot-marshal.sh/configuration/oauth2/https://bot-marshal.sh/configuration/policy-layers/https://bot-marshal.sh/configuration/profiles/https://bot-marshal.sh/configuration/secret-injection-examples/https://bot-marshal.sh/configuration/transforms/https://bot-marshal.sh/getting-started/https://bot-marshal.sh/guides/read-only-github/https://bot-marshal.sh/observability/https://bot-marshal.sh/operations/https://bot-marshal.sh/overview/https://bot-marshal.sh/production/https://bot-marshal.sh/roadmap/https://bot-marshal.sh/troubleshooting/