Preprint, September 12, 2026
Governed Before Execution: The Hugging Face Intrusion as a Case Study in Trajectory Governance, with Evidence from 2024 to September 2026
The July 2026 intrusion passed through four simpler violations of its declared contract before the first remote code execution. This paper maps the public record, and two further incidents disclosed the same week, against a four-function governance architecture and classifies what a governor on the execution path would have prevented, contained, detected earlier, or could not have seen.