Garry Tan
133cb36084
v1.91.154.0 fix(cso): safe-status sets, withheld credential history, ASSERTION_FAILED, Rails read-only verify ( #3302 )
...
* fix(cso): withhold excluded credential files from retained history; name failed witness assertions ASSERTION_FAILED
* fix(cso): Rails verify replaces read-only copied config instead of writing into it
* fix(cso): security expectations may list several safe statuses while excluding the vulnerable marker
(cherry picked from commit aa9f45e0ece0e12152e7d02bf88e1559ee42b1eb)
* docs(changelog): safe status sets
* v1.91.154.0 stamp
* style(cso): format merged snapshot history capture
2026-10-19 21:11:16 +00:00
Garry Tan and OpenAI Codex
4a3c6a8a3c
v1.87.0.0 feat: add verified CSO audits and replayable repair bundles ( #2852 )
...
* feat(cso): add verified audits and replayable repair bundles
* fix(cso): harden qualification and setup boundaries
* fix(cso): assemble security canaries at runtime
* fix(cso): bound release proof and maintenance work
Co-Authored-By: OpenAI Codex <noreply@openai.com >
* fix(cso): require complete evaluation reports
Co-Authored-By: OpenAI Codex <noreply@openai.com >
* fix(cso): replay expired snapshots from supplied source
Co-Authored-By: OpenAI Codex <noreply@openai.com >
* test(cso): synchronize DNS cancellation assertion
Co-Authored-By: OpenAI Codex <noreply@openai.com >
* chore(ship): exempt repository owner from liveness proof
Co-Authored-By: OpenAI Codex <noreply@openai.com >
* test(cso): make recheck retention overlap deterministic
Co-Authored-By: OpenAI Codex <noreply@openai.com >
* chore: bump version and changelog (v1.85.0.0)
Co-Authored-By: OpenAI Codex <noreply@openai.com >
* fix(cso): pass native release gates
Co-Authored-By: OpenAI Codex <noreply@openai.com >
* chore: move release to v1.86.0.0
Co-Authored-By: OpenAI Codex <noreply@openai.com >
* fix(cso): resolve rechecks by finding
Co-Authored-By: OpenAI Codex <noreply@openai.com >
* chore: move release to v1.87.0.0
Co-Authored-By: OpenAI Codex <noreply@openai.com >
* fix(cso): pass macOS and Windows release gates
Normalize BSD wc output, compare Windows paths by filesystem identity, preserve portable snapshot race coverage, and narrow POSIX-only Windows fixtures.
Co-Authored-By: OpenAI Codex <noreply@openai.com >
* fix(cso): harden native verification gates
* fix(cso): refine Windows native diagnostics
* test(cso): isolate Windows Git startup failure
* test(cso): stabilize Windows native diagnostics
* fix(cso): support hardened Git on Windows
* fix(cso): close final verification gaps
* test(cso): bound cold Docker fixture setup
* fix(cso): restore cross-platform free-suite gates
---------
Co-authored-by: OpenAI Codex <noreply@openai.com >
2026-09-14 15:14:58 -07:00
Garry Tan