v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

* feat(cso): add verified audits and replayable repair bundles * fix(cso): harden qualification and setup boundaries * fix(cso): assemble security canaries at runtime * fix(cso): bound release proof and maintenance work Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): require complete evaluation reports Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): replay expired snapshots from supplied source Co-Authored-By: OpenAI Codex <noreply@openai.com> * test(cso): synchronize DNS cancellation assertion Co-Authored-By: OpenAI Codex <noreply@openai.com> * chore(ship): exempt repository owner from liveness proof Co-Authored-By: OpenAI Codex <noreply@openai.com> * test(cso): make recheck retention overlap deterministic Co-Authored-By: OpenAI Codex <noreply@openai.com> * chore: bump version and changelog (v1.85.0.0) Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): pass native release gates Co-Authored-By: OpenAI Codex <noreply@openai.com> * chore: move release to v1.86.0.0 Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): resolve rechecks by finding Co-Authored-By: OpenAI Codex <noreply@openai.com> * chore: move release to v1.87.0.0 Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): pass macOS and Windows release gates Normalize BSD wc output, compare Windows paths by filesystem identity, preserve portable snapshot race coverage, and narrow POSIX-only Windows fixtures. Co-Authored-By: OpenAI Codex <noreply@openai.com> * fix(cso): harden native verification gates * fix(cso): refine Windows native diagnostics * test(cso): isolate Windows Git startup failure * test(cso): stabilize Windows native diagnostics * fix(cso): support hardened Git on Windows * fix(cso): close final verification gaps * test(cso): bound cold Docker fixture setup * fix(cso): restore cross-platform free-suite gates --------- Co-authored-by: OpenAI Codex <noreply@openai.com>
2026-09-16 09:55:29 +02:00 · 2026-09-14 15:14:58 -07:00
parent 9f81911136
commit 4a3c6a8a3c
160 changed files with 24697 additions and 2288 deletions
@@ -0,0 +1,90 @@
+{
+  "schemaVersion": 1,
+  "revision": "cso-v3-build-reviewed-2026-09-10",
+  "previousRevision": null,
+  "helperAbi": 3,
+  "buildRevision": "cso-runtime-inputs-2026-09-10",
+  "profiles": [
+    {
+      "id": "node-24.4.0-amd64",
+      "stack": "node",
+      "platform": "linux/amd64",
+      "state": "build_reviewed",
+      "versions": { "node": "24.4.0", "npm": "11.4.2", "cso-preparation": "1.0.0" },
+      "reviewedAt": "2026-09-10T00:00:00.000Z"
+    },
+    {
+      "id": "node-24.4.0-arm64",
+      "stack": "node",
+      "platform": "linux/arm64",
+      "state": "build_reviewed",
+      "versions": { "node": "24.4.0", "npm": "11.4.2", "cso-preparation": "1.0.0" },
+      "reviewedAt": "2026-09-10T00:00:00.000Z"
+    },
+    {
+      "id": "bun-1.3.10-amd64",
+      "stack": "bun",
+      "platform": "linux/amd64",
+      "state": "build_reviewed",
+      "versions": { "bun": "1.3.10", "cso-preparation": "1.0.0" },
+      "reviewedAt": "2026-09-10T00:00:00.000Z"
+    },
+    {
+      "id": "bun-1.3.10-arm64",
+      "stack": "bun",
+      "platform": "linux/arm64",
+      "state": "build_reviewed",
+      "versions": { "bun": "1.3.10", "cso-preparation": "1.0.0" },
+      "reviewedAt": "2026-09-10T00:00:00.000Z"
+    },
+    {
+      "id": "python-3.13.4-uv-0.8.0-amd64",
+      "stack": "python",
+      "platform": "linux/amd64",
+      "state": "build_reviewed",
+      "versions": { "python": "3.13.4", "uv": "0.8.0", "cso-preparation": "1.0.0" },
+      "reviewedAt": "2026-09-10T00:00:00.000Z"
+    },
+    {
+      "id": "python-3.13.4-uv-0.8.0-arm64",
+      "stack": "python",
+      "platform": "linux/arm64",
+      "state": "build_reviewed",
+      "versions": { "python": "3.13.4", "uv": "0.8.0", "cso-preparation": "1.0.0" },
+      "reviewedAt": "2026-09-10T00:00:00.000Z"
+    },
+    {
+      "id": "rails-ruby-3.4.4-amd64",
+      "stack": "rails",
+      "platform": "linux/amd64",
+      "state": "build_reviewed",
+      "versions": { "ruby": "3.4.4", "bundler": "2.6.7", "cso-preparation": "1.0.0" },
+      "reviewedAt": "2026-09-10T00:00:00.000Z"
+    },
+    {
+      "id": "rails-ruby-3.4.4-arm64",
+      "stack": "rails",
+      "platform": "linux/arm64",
+      "state": "build_reviewed",
+      "versions": { "ruby": "3.4.4", "bundler": "2.6.7", "cso-preparation": "1.0.0" },
+      "reviewedAt": "2026-09-10T00:00:00.000Z"
+    },
+    {
+      "id": "postgresql-17.2-amd64",
+      "stack": "postgresql",
+      "platform": "linux/amd64",
+      "state": "build_reviewed",
+      "versions": { "postgresql": "17.2" },
+      "reviewedAt": "2026-09-10T00:00:00.000Z"
+    },
+    {
+      "id": "postgresql-17.2-arm64",
+      "stack": "postgresql",
+      "platform": "linux/arm64",
+      "state": "build_reviewed",
+      "versions": { "postgresql": "17.2" },
+      "reviewedAt": "2026-09-10T00:00:00.000Z"
+    }
+  ],
+  "runtimes": []
+}