rcourtman 53267e149d Harden least-privilege installer lifecycle state

2026-09-01 15:53:02 +01:00

..

internal

Keep server rollback guidance executable

2026-08-29 10:15:45 +01:00

agent_preflight_test.py

Update release control to use main

2026-07-05 15:20:37 +01:00

agent_preflight.py

Add canonical agent preflight gate

2026-03-20 10:23:29 +00:00

ai_runtime_docs_policy_test.py

Fix local subscription CLI service setup

2026-08-23 09:28:44 +01:00

browser_verification_guard_test.py

Simplify and harden verified Patrol receipts

2026-08-15 10:25:04 +01:00

browser_verification_guard.py

fix(governance): exempt pure prettier reformats from browser proof

2026-08-06 21:53:44 +01:00

canonical_completion_guard_test.py

Harden secure agent runtime boundaries

2026-08-31 00:06:24 +01:00

canonical_completion_guard.py

Fix CI false positives in the canonical completion guard

2026-07-08 14:35:07 +01:00

capture_release_note_visuals.mjs

feat(release): add visual changelog comparisons

2026-08-28 11:29:44 +01:00

check_github_release_immutability_test.py

Gate release publication on immutable setting

2026-08-29 22:41:04 +01:00

commercial_cancellation_reactivation_proof.py

Restore public release proof entrypoints

2026-03-28 17:35:17 +00:00

commercial_cancellation_reactivation_rehearsal.py

Restore public release proof entrypoints

2026-03-28 17:35:17 +00:00

contract_audit_test.py

Make contract audit tests checkout-independent

2026-08-31 12:26:33 +01:00

contract_audit.py

Restore trustworthy governance signals

2026-08-31 00:55:44 +01:00

control_plane_audit_test.py

fix(governance): restore advertised worktree helpers

2026-08-08 04:08:35 +01:00

control_plane_audit.py

…

control_plane.py

Map legacy stable releases in control plane

2026-04-11 13:23:07 +01:00

customer_promotion_lease.sh

Keep convergence evidence off sealed releases

2026-09-01 11:38:55 +01:00

dev_runtime_governance_test.py

Accept qualified recovered release activation

2026-08-28 03:51:26 +01:00

documentation_currentness_test.py

Document shipped availability probe coverage

2026-08-29 18:21:50 +01:00

format_staged_frontend_test.py

fix(tooling): stop worktree commits from skipping prettier

2026-08-06 21:53:44 +01:00

format_staged_frontend.py

fix(tooling): stop worktree commits from skipping prettier

2026-08-06 21:53:44 +01:00

format_staged_go_test.py

fix(release-control): scrub hook git env in remaining scratch-repo git users

2026-07-17 16:39:17 +01:00

format_staged_go.py

fix(release-control): scrub inherited git env in hook scratch-repo helpers

2026-07-17 15:52:11 +01:00

generate_mobile_compatibility_test.py

Enforce Pulse Mobile compatibility from the core contract

2026-07-22 13:41:09 +01:00

generate_mobile_compatibility.py

Enforce Pulse Mobile compatibility from the core contract

2026-07-22 13:41:09 +01:00

generate_platform_support_backend_module.py

Fix Unraid agent host profile detection

2026-05-08 11:05:14 +01:00

generate_platform_support_frontend_module.py

Correct VMware platform readiness classification

2026-05-22 09:13:29 +01:00

governance_stage_guard_test.py

fix(release-control): scrub hook git env in remaining scratch-repo git users

2026-07-17 16:39:17 +01:00

governance_stage_guard.py

fix(release-control): scrub inherited git env in hook scratch-repo helpers

2026-07-17 15:52:11 +01:00

live_runtime_proof_test.py

chore: require live proof for hardware fix claims

2026-08-04 23:57:44 +01:00

live_runtime_proof.py

chore: require live proof for hardware fix claims

2026-08-04 23:57:44 +01:00

mobile_compatibility_test.py

fix(governance): isolate release-control worktree roots

2026-08-08 05:12:07 +01:00

mobile_compatibility.py

Enforce Pulse Mobile compatibility from the core contract

2026-07-22 13:41:09 +01:00

mobile_relay_auth_approvals_proof.py

Restore public release proof entrypoints

2026-03-28 17:35:17 +00:00

mobile_release_gate_test.py

Add mobile impact gate to release dispatch

2026-07-07 18:21:20 +01:00

mobile_release_gate.py

Add mobile impact gate to release dispatch

2026-07-07 18:21:20 +01:00

paid_feature_claims_proof.py

Add paid feature claim proof bundle

2026-04-29 14:18:43 +01:00

proof_entrypoints_test.py

Add paid feature claim proof bundle

2026-04-29 14:18:43 +01:00

pulse_intelligence_gate_test.py

chore: seal Pulse Intelligence release gate

2026-07-13 01:14:19 +01:00

pulse_intelligence_gate.py

chore: seal Pulse Intelligence release gate

2026-07-13 01:14:19 +01:00

readiness_assertion_guard_test.py

fix(release-control): scrub hook git env in remaining scratch-repo git users

2026-07-17 16:39:17 +01:00

readiness_assertion_guard.py

Converge UI primitives and readiness guards

2026-06-13 16:31:52 +01:00

record_rc_to_ga_blocked.py

Prepare v6.0.0-rc.4 release packet

2026-05-05 15:32:32 +01:00

record_rc_to_ga_rehearsal.py

Govern RC-to-GA rehearsal record capture

2026-04-11 14:08:57 +01:00

registry_audit_test.py

Restore scoped governance audit signal

2026-08-30 17:01:44 +01:00

registry_audit.py

Restore scoped governance audit signal

2026-08-30 17:01:44 +01:00

relay_registration_reconnect_drain_proof.py

Restore public release proof entrypoints

2026-03-28 17:35:17 +00:00

release_candidate_manifest_test.py

Enforce exact release visual assets

2026-08-29 02:59:47 +01:00

release_continuity_test.py

Bind continuity checks to activation asset bytes

2026-09-01 12:47:16 +01:00

release_continuity.py

Bind continuity checks to activation asset bytes

2026-09-01 12:47:16 +01:00

release_note_visuals_test.py

Keep server rollback guidance executable

2026-08-29 10:15:45 +01:00

release_note_visuals.py

fix(release): require visual selection evidence

2026-08-28 20:11:04 +01:00

release_promotion_policy_support_test.py

Pin workflow actions and CI image versions

2026-04-22 10:12:15 +01:00

release_promotion_policy_support.py

Govern RC-to-GA rehearsal record capture

2026-04-11 14:08:57 +01:00

release_promotion_policy_test.py

Harden least-privilege installer lifecycle state

2026-09-01 15:53:02 +01:00

render_release_body_test.py

Refresh v6.4.2 final cutoff

2026-08-31 13:46:43 +01:00

render_release_body.py

Keep server rollback guidance executable

2026-08-29 10:15:45 +01:00

repo_file_io_test.py

fix(governance): isolate release-control worktree roots

2026-08-08 05:12:07 +01:00

repo_file_io.py

fix(governance): isolate release-control worktree roots

2026-08-08 05:12:07 +01:00

resolve_release_promotion_test.py

Define beta and RC release maturity

2026-08-31 11:42:03 +01:00

resolve_release_promotion.py

Define beta and RC release maturity

2026-08-31 11:42:03 +01:00

secure_runtime_attestation_test.py

Qualify helper-backed agent update recovery

2026-08-30 21:54:46 +01:00

secure_runtime_attestation_v6_test.py

Authenticate RC artifacts before qualification

2026-08-31 09:49:41 +01:00

secure_runtime_attestation_v6.py

Authenticate RC artifacts before qualification

2026-08-31 09:49:41 +01:00

secure_runtime_attestation_v7_test.py

Add rootful Docker secure-runtime qualification

2026-08-31 18:13:22 +01:00

secure_runtime_attestation_v7.py

Add rootful Docker secure-runtime qualification

2026-08-31 18:13:22 +01:00

secure_runtime_attestation.py

Qualify helper-backed agent update recovery

2026-08-30 21:54:46 +01:00

secure_runtime_rootless_attestation_v1_test.py

Add rootless runtime qualification harness

2026-09-01 12:29:44 +01:00

secure_runtime_rootless_attestation_v1.py

Add rootless runtime qualification harness

2026-09-01 12:29:44 +01:00

secure_runtime_rootless_source_manifest_v1.json

Add rootless runtime qualification harness

2026-09-01 12:29:44 +01:00

secure_runtime_source_manifest_v4.json

Integrate typed helper container summaries

2026-08-30 21:29:11 +01:00

secure_runtime_source_manifest_v5.json

Qualify helper-backed agent update recovery

2026-08-30 21:54:46 +01:00

secure_runtime_source_manifest_v6.json

Wire secure runtime RC qualification

2026-08-31 01:50:48 +01:00

secure_runtime_source_manifest_v7.json

Add rootful Docker secure-runtime qualification

2026-08-31 18:13:22 +01:00

ssh_host_key_policy_test.py

fix(security): verify SSH hosts during proxy cleanup

2026-08-08 05:18:55 +01:00

staged_commit_shape_guard_test.py

Add contract-neutral bypass to staged shape guard

2026-04-17 12:24:01 +01:00

staged_commit_shape_guard.py

Add contract-neutral bypass to staged shape guard

2026-04-17 12:24:01 +01:00

status_audit_test.py

Require demand_evidence on candidate_lane registration

2026-08-24 15:59:32 +01:00

status_audit.py

Require demand_evidence on candidate_lane registration

2026-08-24 15:59:32 +01:00

status_lookup_test.py

Add governed action audit preflight

2026-04-25 22:35:19 +01:00

status_lookup.py

Promote lane expansion as active v6 target

2026-03-19 09:45:43 +00:00

subsystem_contracts_test.py

fix(release-control): scrub hook git env in remaining scratch-repo git users

2026-07-17 16:39:17 +01:00

subsystem_contracts.py

fix(release-control): scrub inherited git env in hook scratch-repo helpers

2026-07-17 15:52:11 +01:00

subsystem_lookup_test.py

Keep subsystem lookup tests checkout-independent

2026-08-31 16:00:47 +01:00

subsystem_lookup.py

fix(governance): isolate release-control worktree roots

2026-08-08 05:12:07 +01:00

validate_artifact_release_line_test.py

Parallelize inert release artifact staging

2026-08-21 18:08:22 +01:00

validate_artifact_release_line.py

Parallelize inert release artifact staging

2026-08-21 18:08:22 +01:00

verify_github_release_integrity_test.py

Verify exact release activation bytes

2026-09-01 13:29:06 +01:00

verify_release_container_images_test.py

Pin container provenance workflow revision

2026-09-01 09:56:14 +01:00

verify_release_helm_chart_test.py

Bind Helm delivery to release provenance

2026-08-30 07:34:56 +01:00

verify_stable_container_aliases_test.py

Continuously verify stable container aliases

2026-08-30 13:55:41 +01:00

work_claim_test.py

Add governed work-claim tooling

2026-03-19 10:06:39 +00:00

work_claim.py

Add governed work-claim tooling

2026-03-19 10:06:39 +00:00

worktree_base.py

fix(governance): restore advertised worktree helpers

2026-08-08 04:08:35 +01:00

worktree_claim.py

fix(governance): restore advertised worktree helpers

2026-08-08 04:08:35 +01:00

worktree_finish.py

fix(governance): restore advertised worktree helpers

2026-08-08 04:08:35 +01:00