mirror of
https://github.com/garrytan/gstack.git
synced 2026-11-09 10:18:32 +01:00
Five findings at the blocking floor from the Step 11 outside voice (gpt-6.1-sol) and the native adversarial pass, fixed as a fourth pass approved by GStack Minder under the three-pass policy: - carry: a path the policy names under stamp_files, stamp_paths or release_outputs is metadata only while its change is a stamp (versionStampOnly for a manifest kind, stampOnlyText otherwise), the rule the tree receipt applies; a logic change in a stamped source file is product. Every metadata-listed path is read at both heads and a non-stamp change drops its globs from the product exclusion. - review-scope: parseHunks keeps a deleted file as a whole changed location, so a cause anchored in a removed export is the diff's to fix, not deferred. - defer: issues are filed through lib/gstack-post's publication scan; a HIGH finding in the title or body refuses and a MEDIUM one needs a human, both recorded as unfiled with the reason; --repo names the destination. - classify: both diffs pin --src-prefix=a/ --dst-prefix=b/ --no-textconv, so diff.mnemonicPrefix cannot send every finding outside. - summary: a row dates from review_binding.started_at before the writer-typed timestamp, so a date-only value cannot drop a real pass. Docs: ship-policy.md#receipt-carry, review-policy.md, the Step 9.4 template and the CHANGELOG gate-integrity note record the rule and the pass. Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>