feat: add clean receipts and clipboard quarantine

Author: JACKNINES

README.md

@@ -157,7 +157,12 @@ they contain no real account, organization, or third-party message data.
 - **Session Copy History:** keeps up to 50 recent text copies in local memory
   while Active Guard is running. Each entry shows its exact capture time,
   probable source application, a bounded visible preview, character count, and
-  detected risks. The source is inferred from the active application; macOS
+  detected risks. Automatic text-cleaning entries also show a Clean Receipt and,
+  only when the original was eligible for history and not truncated, guarded
+  **Copy Clean Result** and **Restore Original** actions. Those actions first
+  confirm that the pasteboard still holds the matching clean result; concealed,
+  transient, auto-generated, and privacy-sensitive items are never retained for
+  restoration. The source is inferred from the active application; macOS
   does not provide a trustworthy browser tab or page URL. Concealed,
   transient, and auto-generated pasteboard entries are not retained, long
   entries are truncated, and all history disappears when Signal Sieve exits.
@@ -192,7 +197,19 @@ they contain no real account, organization, or third-party message data.
   limits input to 4,000 characters, and refuses to overwrite detected changes
   to URLs, numbers, or quotations. Automatic processing skips source code,
   files, images, and privacy-sensitive clipboard types. Deterministic cleaning
-  reanalyzes the result before reporting whether alerts were removed or remain.
+  prepares and reanalyzes the candidate before replacing the clipboard. If a
+  high-risk finding remains after reanalysis, Signal Sieve leaves the clipboard
+  unchanged and marks the copy as quarantined. A red finding that was
+  successfully removed may be replaced, but the red source warning still
+  appears. The Clean Receipt reports the selected protocol, original and
+  remaining alert counts and highest severity, deterministic removed/replaced
+  counts, skipped status, and a short content-free reason with progressively
+  disclosed technical evidence.
+  A green receipt means only that Signal Sieve found no remaining risk covered
+  by this cleaning analysis; it is not a malware verdict, authorship proof, or
+  guarantee that the source is trustworthy. Visual Transfer uses the same
+  receipt and quarantine decision, while its OCR transformation is identified
+  separately from deterministic removed/replaced counts.
   Alert visibility is a separate setting: users may hide
   green and yellow alerts, or hide green through orange alerts. The two
   visibility choices are mutually exclusive, and red alerts cannot be disabled.

SECURITY.md

@@ -21,6 +21,9 @@ public issue. Provide the smallest synthetic reproduction possible.
   entries and 20,000 characters per entry; concealed, transient, and
   auto-generated pasteboard items are not stored. Source application names are
   best-effort observations of the foreground app, not authenticated provenance.
+  Clean-result and original-restore actions are available only for history-
+  eligible, untruncated automatic-cleaning entries, and they fail closed if the
+  pasteboard change count or expected text no longer matches.
 - Opening a finding in the browser is an explicit network boundary. Unicode
   queries contain element metadata only; Surface Regularity queries contain only
   the generic signal topic. Neither may contain the analyzed text.
@@ -31,6 +34,16 @@ public issue. Provide the smallest synthetic reproduction possible.
 - Code Guard never executes, compiles, or automatically rewrites copied code.
   Sanitized output requires explicit review, and visually confusable
   identifiers remain unchanged because their intended spelling is unknowable.
+- Automatic clipboard cleaning prepares and reanalyzes its candidate before
+  writing. If a high-risk finding remains, the pasteboard is left unchanged and
+  the item is treated as quarantined. If an original red finding is removed, the
+  clean text may replace the clipboard, but the red source warning remains
+  mandatory. Clean Receipts store only counts, severities, the selected
+  protocol, skipped status, and bounded content-free reasons.
+  A green receipt is limited to the supported cleaning analysis and is not a
+  general safety or source-trust verdict. Automatic Visual Transfer follows the
+  same reanalysis and quarantine decision, but its OCR output remains lossy and
+  is not represented as a deterministic scalar-replacement count.
 - Binary Guard never decodes or executes a detected payload. Encoded data is
   not inherently unsafe; the label describes its representation, not intent.
 - Contextual Unicode classification is fail-safe rather than blanket removal.

Sources/SignalSieve/App/ContentView.swift

@@ -63,6 +63,8 @@ struct ContentView: View {
                 entries: model.clipboardHistory,
                 language: model.language,
                 onOpen: model.openClipboardHistoryEntry,
+                onCopyCleanResult: model.copyCleanResultFromHistory,
+                onRestoreOriginal: model.restoreOriginalFromHistory,
                 onDelete: model.removeClipboardHistoryEntry,
                 onClear: model.clearClipboardHistory
             )