Garry TanandClaude Fable 5 a101bf4093 fix(release): digest regen is an explicit --regen-digest opt-in, not presence-sniffed code exec ...

Review (security) caught the cycle-1 fix executing any repo's
scripts/gen-agents-digest.ts on plain 'write' — arbitrary code exec from a
hostile clone on a routine bump, contradicting the binary's own containment
posture. The regen still runs the TARGET repo's generator (a 'trusted' copy
beside the binary would false-red the freshness gate on version drift), but
only under the flag: /ship passes it deliberately, in a repo whose code the
operator already executes (its test suite). Plain write is side-effect-free
again. Also: uniform output shape (agentsDigest: null on the JSON-manifest
branch), a REAL generator round-trip test replacing the misnamed lockstep
check, and land-and-deploy's evidence gate gets the same digest allow-path
as ship so the two grading surfaces agree.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-29 05:42:57 +00:00

..

sections

fix(review): advisory findings count in per-specialist stats

2026-08-29 05:18:34 +00:00

SKILL.md

fix(release): digest regen is an explicit --regen-digest opt-in, not presence-sniffed code exec

2026-08-29 05:42:57 +00:00

SKILL.md.tmpl

fix(release): digest regen is an explicit --regen-digest opt-in, not presence-sniffed code exec

2026-08-29 05:42:57 +00:00