Garry TanandOpenAI Codex 4a3c6a8a3c v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852) ...

* feat(cso): add verified audits and replayable repair bundles

* fix(cso): harden qualification and setup boundaries

* fix(cso): assemble security canaries at runtime

* fix(cso): bound release proof and maintenance work

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): require complete evaluation reports

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): replay expired snapshots from supplied source

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* test(cso): synchronize DNS cancellation assertion

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* chore(ship): exempt repository owner from liveness proof

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* test(cso): make recheck retention overlap deterministic

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* chore: bump version and changelog (v1.85.0.0)

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): pass native release gates

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* chore: move release to v1.86.0.0

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): resolve rechecks by finding

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* chore: move release to v1.87.0.0

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): pass macOS and Windows release gates

Normalize BSD wc output, compare Windows paths by filesystem identity, preserve portable snapshot race coverage, and narrow POSIX-only Windows fixtures.

Co-Authored-By: OpenAI Codex <noreply@openai.com>

* fix(cso): harden native verification gates

* fix(cso): refine Windows native diagnostics

* test(cso): isolate Windows Git startup failure

* test(cso): stabilize Windows native diagnostics

* fix(cso): support hardened Git on Windows

* fix(cso): close final verification gaps

* test(cso): bound cold Docker fixture setup

* fix(cso): restore cross-platform free-suite gates

---------

Co-authored-by: OpenAI Codex <noreply@openai.com>

2026-09-14 15:14:58 -07:00

..

providers

v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

2026-09-14 15:14:58 -07:00

agent-sdk-runner.ts

v1.84.1.0 fix: default Codex and Claude to frontier models (#2835)

2026-09-09 08:57:21 -07:00

anthropic-preflight.ts

v1.66.0.0 feat: test/evals/CI speedup — 90s truthful free suite, diff-billed evals, required Linux lane (#2593)

2026-08-15 22:20:30 -07:00

arm-benchmark-harness.ts

v1.75.0.0 feat: ponytail import wave — simplification review lens, arm benchmark, reuse ladder, instruction-tier digest (#2722)

2026-08-29 10:10:35 -07:00

aside-available.ts

v1.81.0.0 feat: Aside is the browser gstack drives first; every browsing skill, the PDF/diagram renderer, and web research; the bundled browser stays the automatic fallback (#2810)

2026-09-06 08:54:25 -07:00

auq-sdk-capture.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

autoplan-artifact-digest.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

autoplan-artifact-permission.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

autoplan-artifact-recorder.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

autoplan-method-read-audit.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

autoplan-phase-observer.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

autoplan-preconfigured-fixture.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

autoplan-setup-question.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

bash-script.ts

v1.80.0.0 fix: setup survives a failed Chromium install, hooks share one state root, gstack never clobbers a skill it did not create (#2802)

2026-09-05 14:45:28 -07:00

benchmark-judge.ts

v1.84.1.0 fix: default Codex and Claude to frontier models (#2835)

2026-09-09 08:57:21 -07:00

benchmark-runner.ts

feat(v1.3.0.0): open agents learnings + cross-model benchmark skill (#1040)

2026-04-19 17:50:31 +08:00

budget-override.test.ts

v1.74.0.0 test/CI overhaul: green means green, suites restructured for speed (#2721)

2026-08-29 09:06:54 -07:00

budget-override.ts

v1.46.0.0 feat: gstack v2 foundation — catalog tokens drop 56%, eval-first floor covers all 51 skills (#1712)

2026-05-26 16:50:03 -07:00

capture-context-budget.ts

v1.71.0.0 feat: token-load reduction — preamble runtime scripts, gated onboarding, 20 skill carves, CLAUDE.md trim (#2691)

2026-08-27 09:50:31 -07:00

capture-parity-baseline.test.ts

v1.46.0.0 feat: gstack v2 foundation — catalog tokens drop 56%, eval-first floor covers all 51 skills (#1712)

2026-05-26 16:50:03 -07:00

capture-parity-baseline.ts

v1.77.0.0 feat: test-infrastructure overhaul wave 1 — matrix deletion, flake telemetry, sync-spawn wedge class extinct (#2746)

2026-08-31 08:55:30 -07:00

captured-paths.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

carve-guard-checks.ts

v1.57.0.0 feat: carve-guard system + carve cso/document-release/design-consultation (#1907)

2026-06-07 19:13:24 -07:00

carve-guards.ts

v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

2026-09-14 15:14:58 -07:00

ceo-approach-pick.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

ceo-completion-handoff.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

ceo-mode-option.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

ceo-section-loading-fixture.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

claude-pty-runner.scope-gate-floor.unit.test.ts

v1.62.0.0 feat: plan-mode auto-select at the review scope gate (#2533)

2026-08-12 11:12:28 -07:00

claude-pty-runner.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

claude-pty-runner.unit.test.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

codex-session-runner.ts

v1.84.1.0 fix: default Codex and Claude to frontier models (#2835)

2026-09-09 08:57:21 -07:00

coverage-audit-evidence.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

cso-eval-oracles.ts

v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

2026-09-14 15:14:58 -07:00

cso-qualified-cli.ts

v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

2026-09-14 15:14:58 -07:00

cso-runtime-catalog.ts

v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

2026-09-14 15:14:58 -07:00

design-artifact-question.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

design-count-outside.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

design-count-review.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

devex-count-fixture.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

devex-seed-coverage.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

disabled-plan-review-fixture.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

dx-selected-navigation.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

e2e-gate.ts

v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)

2026-08-15 09:37:04 -07:00

e2e-gate.unit.test.ts

v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)

2026-08-15 09:37:04 -07:00

e2e-helpers.ts

v1.78.0.0 fix: the two-red-lanes wave — AUQ collapse rooted, OSV green from 105, 18 community PRs absorbed, upgrade path can't eat installs (#2752)

2026-09-01 11:15:11 -07:00

emulate-bun-windows-eexist.ts

v1.69.0.0 fix: the silent-failure wave — 6 fixes, 5 community PRs absorbed, tracker closed with receipts (#2666)

2026-08-24 08:55:58 -07:00

eng-cache-writer-decision.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

eng-completion-handoff.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

eng-retained-corpus.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

eng-seeded-coverage.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

eval-budgets.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

eval-store.test.ts

v1.77.0.0 feat: test-infrastructure overhaul wave 1 — matrix deletion, flake telemetry, sync-spawn wedge class extinct (#2746)

2026-08-31 08:55:30 -07:00

eval-store.ts

v1.77.0.0 feat: test-infrastructure overhaul wave 1 — matrix deletion, flake telemetry, sync-spawn wedge class extinct (#2746)

2026-08-31 08:55:30 -07:00

fake-bun-cli.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

fake-impeccable.ts

v1.84.0.0 feat: impeccable interop: detector pre-pass in four design skills, DOM-mode scans, open DESIGN.md format, one typed slop catalog (#2832)

2026-09-08 22:40:22 -07:00

fs-caps.ts

v1.72.0.0 feat: Aside recommended driver for third-party web actions (#2710)

2026-08-28 11:43:13 -07:00

gemini-session-runner.test.ts

feat: Gemini CLI E2E tests (v0.9.2.0) (#252)

2026-03-20 08:30:09 -07:00

gemini-session-runner.ts

v1.77.0.0 feat: test-infrastructure overhaul wave 1 — matrix deletion, flake telemetry, sync-spawn wedge class extinct (#2746)

2026-08-31 08:55:30 -07:00

hermetic-env.test.ts

v1.58.1.0 feat: hermetic local E2E + Conductor prose AskUserQuestion (#2004)

2026-06-14 11:40:57 -07:00

hermetic-env.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

hermetic-skill-runtime.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

llm-judge.ts

v1.84.1.0 fix: default Codex and Claude to frontier models (#2835)

2026-09-09 08:57:21 -07:00

native-auto-decide.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

observability.test.ts

v1.75.0.0 feat: ponytail import wave — simplification review lens, arm benchmark, reuse ladder, instruction-tier digest (#2722)

2026-08-29 10:10:35 -07:00

outside-voice-evidence.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

outside-voice-fixture.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

outside-voice-receipt.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

paid-test-set.ts

v1.74.0.0 test/CI overhaul: green means green, suites restructured for speed (#2721)

2026-08-29 09:06:54 -07:00

parity-harness.ts

v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

2026-09-14 15:14:58 -07:00

periodic-exclude-data.ts

v1.74.0.0 test/CI overhaul: green means green, suites restructured for speed (#2721)

2026-08-29 09:06:54 -07:00

plan-count-artifacts.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

plan-count-file-permission.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

plan-count-fixture.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

plan-count-pending-exit.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

plan-count-pending-question.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

plan-count-transcript.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

plan-floor-target.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

plan-scope-selection.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

pricing.ts

feat(v1.3.0.0): open agents learnings + cross-model benchmark skill (#1040)

2026-04-19 17:50:31 +08:00

pty-screen.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

pty-trust-dialog.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

required-reads.ts

v1.54.0.0 feat: carve /ship into skeleton + on-demand sections (-59% always-loaded) (#1806)

2026-05-30 12:09:10 -07:00

run-bin.test.ts

v1.74.0.0 test/CI overhaul: green means green, suites restructured for speed (#2721)

2026-08-29 09:06:54 -07:00

run-bin.ts

v1.74.0.0 test/CI overhaul: green means green, suites restructured for speed (#2721)

2026-08-29 09:06:54 -07:00

scratch-repo.ts

v1.66.1.0 feat: content binding — evidence ledger, wtree staleness, tracker trust envelope, fail-closed hooks (#2603)

2026-08-16 09:53:31 -07:00

secret-sink-harness.ts

v1.12.0.0 feat: /setup-gbrain — coding-agent onboarding for gbrain (#1183)

2026-04-24 01:38:21 -07:00

session-runner.test.ts

feat: stream-json NDJSON parser for real-time E2E progress

2026-03-14 03:49:36 -05:00

session-runner.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

setup-gbrain-fixture.ts

v1.71.0.0 feat: token-load reduction — preamble runtime scripts, gated onboarding, 20 skill carves, CLAUDE.md trim (#2691)

2026-08-27 09:50:31 -07:00

skill-census.ts

v1.63.0.0 feat: GStack 2 fork port wave — egress receipts, context-bill, sharded gate, /health fix (#2541)

2026-08-14 09:28:56 -07:00

skill-fixture.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

skill-parser.ts

v1.81.0.0 feat: Aside is the browser gstack drives first; every browsing skill, the PDF/diagram renderer, and web research; the bundled browser stays the automatic fallback (#2810)

2026-09-06 08:54:25 -07:00

test-selection.ts

v1.66.0.0 feat: test/evals/CI speedup — 90s truthful free suite, diff-billed evals, required Linux lane (#2593)

2026-08-15 22:20:30 -07:00

third-party-actions.ts

v1.84.1.0 fix: default Codex and Claude to frontier models (#2835)

2026-09-09 08:57:21 -07:00

tool-map.ts

v1.81.0.0 feat: Aside is the browser gstack drives first; every browsing skill, the PDF/diagram renderer, and web research; the bundled browser stays the automatic fallback (#2810)

2026-09-06 08:54:25 -07:00

touchfiles-data.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

touchfiles.ts

v1.66.0.0 feat: test/evals/CI speedup — 90s truthful free suite, diff-billed evals, required Linux lane (#2593)

2026-08-15 22:20:30 -07:00

transcript-section-logger.ts

v1.54.0.0 feat: carve /ship into skeleton + on-demand sections (-59% always-loaded) (#1806)

2026-05-30 12:09:10 -07:00

workflow-excerpt.ts

v1.84.1.0 fix: default Codex and Claude to frontier models (#2835)

2026-09-09 08:57:21 -07:00

workflow-judge-input.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00