Files
pulse/scripts/tests
pulse-triage[bot] b4aa640c40 Keep public installer verification keys out of fixture constants
Replace only the recipe public-key field with the generated fixture signer and reject missing or ambiguous verification keys. Preserve the exact historical public-key findings without broadening any detector, path allowlist or runtime trust rule.

Contract-Neutral: Test-only fixture substitution and exact historical public-key false positives; no installer, runtime, API, permission or secret-detection contract changes.
Change-source: pulse-maintainer
2026-10-29 20:45:06 +00:00
..