Garry Tan 133cb36084 v1.91.154.0 fix(cso): safe-status sets, withheld credential history, ASSERTION_FAILED, Rails read-only verify (#3302) ...

* fix(cso): withhold excluded credential files from retained history; name failed witness assertions ASSERTION_FAILED

* fix(cso): Rails verify replaces read-only copied config instead of writing into it

* fix(cso): security expectations may list several safe statuses while excluding the vulnerable marker

(cherry picked from commit aa9f45e0ece0e12152e7d02bf88e1559ee42b1eb)

* docs(changelog): safe status sets

* v1.91.154.0 stamp

* style(cso): format merged snapshot history capture

2026-10-19 21:11:16 +00:00

..

images

v1.91.29.0 fix(cso): native runtime qualification passes for Node, Bun, Python and Rails (#3044)

2026-10-06 10:32:19 -07:00

scanner-images

Promote qualified CSO scanner catalog (#3042)

2026-10-05 21:42:48 +00:00

.prettierrc.json

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

admission.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

bounded-file.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

cache.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

cli.ts

v1.91.152.0 fix(cso): start and run on repos with nested Git repos, long history, and macOS sockets (#3255, #3248) (#3303)

2026-10-19 20:13:14 +00:00

contracts.ts

v1.91.154.0 fix(cso): safe-status sets, withheld credential history, ASSERTION_FAILED, Rails read-only verify (#3302)

2026-10-19 21:11:16 +00:00

docker.ts

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

history.ts

v1.91.154.0 fix(cso): safe-status sets, withheld credential history, ASSERTION_FAILED, Rails read-only verify (#3302)

2026-10-19 21:11:16 +00:00

image-provisioning.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

launcher-windows.c

v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

2026-09-14 15:14:58 -07:00

launcher.c

v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

2026-09-14 15:14:58 -07:00

preparation-container.ts

v1.91.29.0 fix(cso): native runtime qualification passes for Node, Bun, Python and Rails (#3044)

2026-10-06 10:32:19 -07:00

preparation-docker.ts

v1.91.154.0 fix(cso): safe-status sets, withheld credential history, ASSERTION_FAILED, Rails read-only verify (#3302)

2026-10-19 21:11:16 +00:00

preparation-executor.ts

v1.91.36.0 fix(cso): Python and Rails repairs replay, Rails verification fits its budget, killed attempts leave no scratch (#3074)

2026-10-08 06:06:43 +00:00

preparation.ts

v1.91.36.0 fix(cso): Python and Rails repairs replay, Rails verification fits its budget, killed attempts leave no scratch (#3074)

2026-10-08 06:06:43 +00:00

process-identity.ts

v1.91.16.0 fix: safe installs and upgrades, skills start everywhere, truthful completion (parallel wave) (#3014)

2026-10-03 07:54:09 -07:00

process.ts

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

publish-lock.c

v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

2026-09-14 15:14:58 -07:00

runtime-catalog.json

v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

2026-09-14 15:14:58 -07:00

runtime-catalog.ts

v1.91.25.0 feat(cso): private two-architecture release scoring + self-checking runtime release gates (#3036)

2026-10-04 21:47:21 -07:00

scanner-catalog.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

scanner-executor.ts

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

scanners.ts

v1.91.22.0 feat(cso): reviewed, attested scanner build inputs + fixes so scanner qualification can pass (#3035)

2026-10-04 17:50:26 -07:00

snapshot.ts

v1.91.154.0 fix(cso): safe-status sets, withheld credential history, ASSERTION_FAILED, Rails read-only verify (#3302)

2026-10-19 21:11:16 +00:00

state.ts

v1.91.124.0 feat(cso): helper run clock (remainingSeconds), /cso time discipline, content-free producer tool timeline (#3242)

2026-10-17 17:19:52 +00:00

verification.ts

v1.91.154.0 fix(cso): safe-status sets, withheld credential history, ASSERTION_FAILED, Rails read-only verify (#3302)

2026-10-19 21:11:16 +00:00

verifier.ts

v1.91.154.0 fix(cso): safe-status sets, withheld credential history, ASSERTION_FAILED, Rails read-only verify (#3302)

2026-10-19 21:11:16 +00:00

watchdog.c

v1.91.106.0 fix: the 2026-10-15 issue wave (#3209)

2026-10-16 22:00:32 +00:00

windows-docker.ts

v1.91.32.0 fix: Codex works from zsh, free text never enters shell commands, honest failures (#3057)

2026-10-06 23:42:19 +00:00

witness.ts

v1.91.36.0 fix(cso): Python and Rails repairs replay, Rails verification fits its budget, killed attempts leave no scratch (#3074)

2026-10-08 06:06:43 +00:00