mirror of
https://github.com/garrytan/gstack.git
synced 2026-09-17 02:15:31 +02:00
v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)
* feat(cso): add verified audits and replayable repair bundles * fix(cso): harden qualification and setup boundaries * fix(cso): assemble security canaries at runtime * fix(cso): bound release proof and maintenance work Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): require complete evaluation reports Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): replay expired snapshots from supplied source Co-Authored-By: OpenAI Codex <noreply@openai.com> * test(cso): synchronize DNS cancellation assertion Co-Authored-By: OpenAI Codex <noreply@openai.com> * chore(ship): exempt repository owner from liveness proof Co-Authored-By: OpenAI Codex <noreply@openai.com> * test(cso): make recheck retention overlap deterministic Co-Authored-By: OpenAI Codex <noreply@openai.com> * chore: bump version and changelog (v1.85.0.0) Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): pass native release gates Co-Authored-By: OpenAI Codex <noreply@openai.com> * chore: move release to v1.86.0.0 Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): resolve rechecks by finding Co-Authored-By: OpenAI Codex <noreply@openai.com> * chore: move release to v1.87.0.0 Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): pass macOS and Windows release gates Normalize BSD wc output, compare Windows paths by filesystem identity, preserve portable snapshot race coverage, and narrow POSIX-only Windows fixtures. Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): harden native verification gates * fix(cso): refine Windows native diagnostics * test(cso): isolate Windows Git startup failure * test(cso): stabilize Windows native diagnostics * fix(cso): support hardened Git on Windows * fix(cso): close final verification gaps * test(cso): bound cold Docker fixture setup * fix(cso): restore cross-platform free-suite gates --------- Co-authored-by: OpenAI Codex <noreply@openai.com>
This commit is contained in:
co-authored by
OpenAI Codex
parent
9f81911136
commit
4a3c6a8a3c
@@ -27,9 +27,13 @@ changed. -->
|
||||
- **Verified live by:**
|
||||
- **Did NOT test:**
|
||||
|
||||
## Liveness proof (required)
|
||||
## Liveness proof (required for external contributors)
|
||||
|
||||
<!-- Attach a screenshot of your own machine with the text `GSTACK PR` typed LIVE
|
||||
<!-- Repository owner @garrytan is explicitly exempt. Agents must verify the
|
||||
authenticated GitHub login with `gh api user --jq .login`; Git author metadata
|
||||
alone is not sufficient.
|
||||
|
||||
All other contributors: attach a screenshot of your own machine with the text `GSTACK PR` typed LIVE
|
||||
into a real surface — terminal prompt, a shell command, your browser
|
||||
address/search bar, an editor buffer. It must be TYPED INTO A LIVE UI, not drawn,
|
||||
overlaid, or edited onto the image. A painted-on `GSTACK PR` is an automatic
|
||||
@@ -37,7 +41,7 @@ close. This confirms a human opened this PR. -->
|
||||
|
||||
## Checklist
|
||||
|
||||
- [ ] Liveness screenshot attached: `GSTACK PR` typed live into a real surface (not edited onto the image)
|
||||
- [ ] Liveness screenshot attached (`GSTACK PR` typed live into a real surface) or PR author is @garrytan (owner exemption)
|
||||
- [ ] This is not a generated-file-only diff (I edited the source/template and regenerated)
|
||||
- [ ] No ETHOS.md edits, and no changes to voice / founder perspective / YC references
|
||||
- [ ] New public command / external service / host adapter has an accepted issue linked (or N/A)
|
||||
|
||||
Reference in New Issue
Block a user