garrytan 9e62b87462 fix: version strings are not IPs, failed update checks are not 'up to date', private security reporting (#2856, #2786, #2984) ...

- The pre-push redact hook exempts a root VERSION file that is only a
  version string and the version token in CHANGELOG release headings;
  the engine allowlist is untouched.
- gstack-update-check caches an unreadable remote as CHECK_FAILED with
  a short TTL instead of UP_TO_DATE; /gstack-upgrade never reports
  'latest' after a failed check.
- SECURITY.md points reporters at GitHub private vulnerability
  reporting.
- pr-title-sync (pull_request_target, write token) pins actions/checkout
  to a reviewed SHA.

2026-10-02 14:56:05 +00:00

..

migrations

v1.91.11.0 refactor: one state-root rule, browse route table, shared shard engine, PTY harness split, MECE review resolvers (#3002)

2026-10-01 11:57:48 -07:00

SKILL.md

fix: version strings are not IPs, failed update checks are not 'up to date', private security reporting (#2856, #2786, #2984)

2026-10-02 14:56:05 +00:00

SKILL.md.tmpl

fix(gbrain): brain context loads, managed sync works, memory sync stops duplicating (#2883, #2985, #2922)

2026-10-02 14:56:05 +00:00