Sinabina and Claude Opus 4.8
cb1792fc58
Merge codex/gstack-2 into gstack2-runtime-integration
...
Reconcile the four integrated v2 runtime implementations (unified execution
result contract, execution profiles, capability readiness, GitHub security)
with main's browser-provider hardening.
Conflict resolutions:
- runtimeContract() generator: keep new execution-result + doctor-capability
paragraphs, adopt main's `[matching browser flags]` fallback wording;
regenerate the six RUNTIME.md.
- package.json: keep the strict isolated test:gstack2 runner and marked 18.0.6
security bump; adopt main's playwright-core alias.
- bun.lock: regenerated via bun install.
- release-hardening.test.ts: adopt main's browser-provider assertions
(resolveServerLaunchTarget, --browser managed smoke loop).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-07-21 13:15:03 -07:00
Sinabina
37144e8b05
fix(gstack2): harden integrated runtime verification
2026-07-21 12:29:01 -07:00
Sinabina
e3effb3fc4
feat: require explicit browser provider consent
2026-07-21 12:07:01 -07:00
Sinabina
f7d44a4e5a
fix: keep release smoke fixture inside project
...
Create the browser smoke page under GITHUB_WORKSPACE so the runtime's local-file trust boundary permits it on every runner, and advance the immutable bootstrap channel to RC3.
2026-07-21 10:43:57 -07:00
Sinabina
dbf94804ad
fix: make runtime release six-platform safe
...
Use an allowed local file URL for the browser smoke test, centralize keyless archive signing after native builds so Windows ARM64 does not require an unavailable Cosign binary, and advance the immutable bootstrap channel to RC2.
2026-07-20 16:58:31 -07:00
Sinabina
09492d34b4
chore(security): harden GitHub workflows
2026-07-20 16:23:41 -07:00
Sinabina
f14445bb00
feat: componentize GStack 2 runtime and release integrity
2026-07-20 14:16:23 -07:00
