v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

* feat(cso): add verified audits and replayable repair bundles

* fix(cso): harden qualification and setup boundaries

* fix(cso): assemble security canaries at runtime

* fix(cso): bound release proof and maintenance work

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): require complete evaluation reports

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): replay expired snapshots from supplied source

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* test(cso): synchronize DNS cancellation assertion

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* chore(ship): exempt repository owner from liveness proof

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* test(cso): make recheck retention overlap deterministic

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* chore: bump version and changelog (v1.85.0.0)

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): pass native release gates

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* chore: move release to v1.86.0.0

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): resolve rechecks by finding

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* chore: move release to v1.87.0.0

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): pass macOS and Windows release gates

Normalize BSD wc output, compare Windows paths by filesystem identity, preserve portable snapshot race coverage, and narrow POSIX-only Windows fixtures.

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): harden native verification gates

* fix(cso): refine Windows native diagnostics

* test(cso): isolate Windows Git startup failure

* test(cso): stabilize Windows native diagnostics

* fix(cso): support hardened Git on Windows

* fix(cso): close final verification gaps

* test(cso): bound cold Docker fixture setup

* fix(cso): restore cross-platform free-suite gates

---------

Co-authored-by: OpenAI Codex <noreply@openai.com>
This commit is contained in:
Garry Tan
2026-09-14 15:14:58 -07:00
committed by GitHub
co-authored by OpenAI Codex
parent 9f81911136
commit 4a3c6a8a3c
160 changed files with 24697 additions and 2288 deletions
+43 -43
View File
@@ -1,65 +1,65 @@
{
"_comment": "Context-budget ratchet ceilings (~tokens). Regenerate: bun test/helpers/capture-context-budget.ts. Headroom: alwaysOnTotal x1.05, eagerPerInvocation x1.1. Graded by test/context-budget-ratchet.test.ts via lib/context-bill.ts checkBudget.",
"alwaysOnTotal": 6372,
"alwaysOnTotal": 6397,
"eagerPerInvocation": {
"autoplan": 17697,
"benchmark": 7403,
"autoplan": 18022,
"benchmark": 7657,
"benchmark-models": 3829,
"browse": 8003,
"browser-skills/hackernews-frontpage": 371,
"canary": 13522,
"canary": 13914,
"careful": 919,
"codex": 15490,
"context-restore": 9618,
"context-save": 10234,
"cso": 16110,
"design-consultation": 18392,
"design-html": 13767,
"design-review": 34483,
"design-shotgun": 13828,
"devex-review": 20302,
"codex": 15479,
"context-restore": 9607,
"context-save": 10224,
"cso": 4700,
"design-consultation": 18595,
"design-html": 14429,
"design-review": 34471,
"design-shotgun": 13856,
"devex-review": 20292,
"diagram": 4279,
"document-generate": 12362,
"document-release": 10602,
"document-generate": 12352,
"document-release": 10683,
"freeze": 990,
"gstack": 3976,
"gstack-upgrade": 4201,
"gstack-upgrade": 4586,
"guard": 889,
"health": 10816,
"investigate": 12286,
"ios-clean": 8721,
"ios-design-review": 8902,
"ios-fix": 8674,
"ios-qa": 11414,
"ios-sync": 8845,
"land-and-deploy": 18971,
"landing-report": 9527,
"learn": 9197,
"health": 10805,
"investigate": 12276,
"ios-clean": 8710,
"ios-design-review": 8891,
"ios-fix": 8664,
"ios-qa": 11403,
"ios-sync": 8834,
"land-and-deploy": 19043,
"landing-report": 9517,
"learn": 9187,
"make-pdf": 5314,
"office-hours": 22420,
"office-hours": 22374,
"open-gstack-browser": 4510,
"openclaw/skills/gstack-openclaw-ceo-review": 2764,
"openclaw/skills/gstack-openclaw-investigate": 1429,
"openclaw/skills/gstack-openclaw-office-hours": 4433,
"openclaw/skills/gstack-openclaw-retro": 2542,
"pair-agent": 11622,
"plan-ceo-review": 20550,
"plan-design-review": 20315,
"plan-devex-review": 17799,
"plan-eng-review": 14750,
"plan-tune": 14771,
"qa": 15857,
"qa-only": 16910,
"retro": 18974,
"review": 16021,
"pair-agent": 11612,
"plan-ceo-review": 20824,
"plan-design-review": 20648,
"plan-devex-review": 17884,
"plan-eng-review": 14930,
"plan-tune": 14761,
"qa": 15847,
"qa-only": 17218,
"retro": 19122,
"review": 16010,
"scrape": 6904,
"setup-browser-cookies": 3194,
"setup-deploy": 11272,
"setup-gbrain": 15565,
"ship": 20518,
"skillify": 12206,
"spec": 15011,
"sync-gbrain": 13985,
"setup-deploy": 11557,
"setup-gbrain": 15554,
"ship": 20347,
"skillify": 12196,
"spec": 14993,
"sync-gbrain": 13975,
"unfreeze": 393
}
}