Files
gstack/.gitignore
Garry TanandOpenAI Codex 4a3c6a8a3c v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)
* feat(cso): add verified audits and replayable repair bundles

* fix(cso): harden qualification and setup boundaries

* fix(cso): assemble security canaries at runtime

* fix(cso): bound release proof and maintenance work

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): require complete evaluation reports

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): replay expired snapshots from supplied source

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* test(cso): synchronize DNS cancellation assertion

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* chore(ship): exempt repository owner from liveness proof

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* test(cso): make recheck retention overlap deterministic

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* chore: bump version and changelog (v1.85.0.0)

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): pass native release gates

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* chore: move release to v1.86.0.0

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): resolve rechecks by finding

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* chore: move release to v1.87.0.0

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): pass macOS and Windows release gates

Normalize BSD wc output, compare Windows paths by filesystem identity, preserve portable snapshot race coverage, and narrow POSIX-only Windows fixtures.

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): harden native verification gates

* fix(cso): refine Windows native diagnostics

* test(cso): isolate Windows Git startup failure

* test(cso): stabilize Windows native diagnostics

* fix(cso): support hardened Git on Windows

* fix(cso): close final verification gaps

* test(cso): bound cold Docker fixture setup

* fix(cso): restore cross-platform free-suite gates

---------

Co-authored-by: OpenAI Codex <noreply@openai.com>
2026-09-14 15:14:58 -07:00

65 lines
1.5 KiB
Plaintext

.env
node_modules/
dist/
browse/dist/
design/dist/
make-pdf/dist/
# diagram-render ships its built bundle (offline-at-install premise, eng-review D2)
!lib/diagram-render/dist/
!lib/diagram-render/dist/**
bin/gstack-global-discover*
# Compiled CSO launcher, helper, and watchdog.
bin/gstack-cso-launcher
bin/gstack-cso-launcher.exe
bin/gstack-cso-core
bin/gstack-cso-core.exe
bin/gstack-cso-watchdog
bin/gstack-cso-watchdog.exe
bin/.gstack-cso-stage.*
bin/.gstack-cso-build.lock/
bin/.gstack-cso-generation.lock
bin/.gstack-cso-generation
lib/cso/images/gstack-cso-verifier
lib/cso/images/gstack-cso-preparation
.gstack/
.claude/skills/
.claude/gstack-rendered/
.claude/scheduled_tasks.lock
.claude/*.lock
.agents/
.factory/
.kiro/
.opencode/
.slate/
.cursor/
.openclaw/
.hermes/
.gbrain/
.gbrain-source
.context/
extension/.auth.json
# xterm assets are vendored from npm at build time; not source-of-truth.
extension/lib/xterm.js
extension/lib/xterm.css
extension/lib/xterm-addon-fit.js
.gstack-worktrees/
/tmp/
*.log
*.bun-build
.env
.env.local
.env.*
!.env.example
supabase/.temp/
# Throughput analysis — local-only, regenerate via scripts/garry-output-comparison.ts
docs/throughput-*.json
# gbrain local source-staging dir (capability checks, source clones) — runtime artifact
.sources/
# SPM build output from the gen-accessors tool (built in place by
# skill-e2e-ios-swift-build; regenerates on every run — never commit)
ios-qa/scripts/gen-accessors-tool/.build/
ios-qa/scripts/gen-accessors-tool/Package.resolved