sencho

mirror of https://github.com/Studio-Saelix/sencho.git synced 2026-08-05 08:27:42 +00:00

Files

T

Anso ca496c89dc fix: name matched risk inputs in policy block messages (#1471 )

The auto-update, bulk-label, scheduler, and blueprint deploy block
messages hardcoded "image(s) exceed <max_severity>", which is wrong
under the risk-first policy model: a block can be driven by a
known-exploited (KEV) or fixable Critical/High input while the severity
threshold was never the trigger. In those cases the message named a
severity ceiling the policy did not enforce.

Route all four message paths through a shared summarizeBlockReasons
helper (the same reason text the deploy-gate 409 response and the block
dialog already use), so every surface names the inputs that actually
matched. Falls back to a generic phrase when no reason was recorded.

2026-06-26 15:34:24 -04:00

__tests__

fix: name matched risk inputs in policy block messages (#1471 )

2026-06-26 15:34:24 -04:00

bootstrap

feat(security): action-posture Security dashboard with exploit intel and triage (#1424 )

2026-06-23 17:42:11 -04:00

cli

feat(recovery): add safe-mode recovery surface and emergency CLI (#1286 )

2026-06-02 16:11:24 -04:00

helpers

fix: name matched risk inputs in policy block messages (#1471 )