CI on the bundle-9 merge (run #24962543332) failed golangci-lint with 16
staticcheck ST1018 'string literal contains the Unicode format character
U+202X, consider using the \u202X escape sequence' hits — across the
two test files we added (internal/validation/unicode_test.go +
internal/connector/issuer/local/bundle9_coverage_test.go).
Mechanical sweep, byte-identical at runtime:
internal/validation/unicode_test.go (13 + 1 hits cleared)
RTL/LTR overrides U+202A..U+202E + U+2066..U+2069 (lines 39-47)
zero-width U+200B..U+200D + U+2060 (lines 67-70)
additional U+202E in TestValidateUnicodeSafe_ErrorMentionsByteOffset
internal/connector/issuer/local/bundle9_coverage_test.go (3 hits)
U+202E in TestValidateCSRUnicode_RejectsDNSNameRTL
U+200B in TestValidateCSRUnicode_RejectsEmailZeroWidth
U+202E in TestValidateCSRUnicode_RejectsAdditionalSAN
The strings now use Go \uXXXX escape sequences. Identical UTF-8 bytes
hit ValidateUnicodeSafe at runtime — every test passes unchanged
locally. The file-header comment in unicode_test.go that promised this
convention is now actually honored.
Verification: staticcheck -checks=ST1018 returns clean across the two
packages. go test -count=1 -short still green.
Pre-commit gate added to prevent recurrence:
Makefile: new 'verify' aggregate target runs gofmt + go vet +
golangci-lint run + go test -short — same set CI enforces. Run
'make verify' before every commit going forward.
cowork/CLAUDE.md: new 'Pre-commit verification gate' paragraph in
Operating Rules. Documents make verify as the canonical gate;
explains WHY (Bundle-9 shipped green-on-vet / red-on-CI because
ST1018 only fires under golangci-lint's staticcheck, not vet);
documents the staticcheck-only fallback for disk-constrained
sandboxes.
This commit changes only:
- 2 test source files (\uXXXX escapes, no behavior change)
- Makefile (1 new target, 1 .PHONY entry, 1 help line)
- cowork/CLAUDE.md (1 new operating-rule paragraph)
Wire all remaining dashboard views to real API: agent detail page
with heartbeat status and capabilities, audit trail with time range/
actor/resource filters, notifications with grouped-by-cert view and
read/unread state, policies with severity summary bar, new issuers
and targets list views. Add GitHub Actions CI with parallel Go and
Frontend jobs. Update Makefile with test-cover and frontend-build
targets.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
shankar0123