Skip to content

Navigation Menu

Appearance settings

- AI CODE CREATION
  GitHub CopilotWrite better code with AI
  GitHub Copilot appDirect agents from issue to merge
  MCP Registry^NewIntegrate external tools
- DEVELOPER WORKFLOWS
  ActionsAutomate any workflow
  CodespacesInstant dev environments
  IssuesPlan and track work
  Code ReviewManage code changes
- APPLICATION SECURITY
  GitHub Advanced SecurityFind and fix vulnerabilities
  Code securitySecure your code as you build
  Secret protectionStop leaks before they start
- EXPLORE
  Why GitHub
  Documentation
  Blog
  Changelog
  Marketplace
View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

fraware / SCOPE Public

Notifications You must be signed in to change notification settings
Fork 0
Star 0

Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights

SCOPE v0.7.0: institutional pilot hardening#4

Merged

fraware merged 142 commits into

mainfraware/SCOPE:mainfrom

release/v0.7.0fraware/SCOPE:release/v0.7.0Copy head branch name to clipboard

Jun 28, 2026

Conversation Commits142 (142)Checks Files changed

Merged

SCOPE v0.7.0: institutional pilot hardening#4
fraware merged 142 commits into
mainfrom
release/v0.7.0

Commits

Commits on Jun 28, 2026

chore(release): bump package version to 0.7.0
fraware
committed
chore(release): set __version__ to 0.7.0
fraware
committed
feat(identity): add identity assurance levels IAL0 through IAL4
fraware
committed
feat(identity): add identity assurance JSON schema
fraware
committed
test(identity): cover assurance resolution and provenance merge
fraware
committed
docs(identity): document assurance levels and enforcement
fraware
committed
feat(authority): separate scope and policy decision gates
fraware
committed
feat(rbac): harden role checks and delegation expiry
fraware
committed
test(rbac): assert scope and action authority boundaries
fraware
committed
docs(rbac): document scope authority separation
fraware
committed
feat(ledger): add delivery modes, spool, and remote sink hardening
fraware
committed
feat(ledger): track delivery state and fail_closed grant emission
fraware
committed
feat(quality): expose ledger_delivery_failure_count metric
fraware
committed
test(ledger): cover spool replay and fail_closed delivery
fraware
committed
feat(queue): add review workflow state machine helpers
fraware
committed
feat(queue): extend review queue schema for workflow states
fraware
committed
feat(queue): enforce valid status transitions on queue updates
fraware
committed
feat(queue): wire escalation rules to workflow states
fraware
committed
feat(queue): show workflow state in queue dashboard render
fraware
committed
feat(cli): add review queue state transition commands
fraware
committed
test(queue): cover forbidden transitions and happy path
fraware
committed
feat(signing): add signing assurance levels and policy gate
fraware
committed
policy(signing): add minimum signing assurance defaults
fraware
committed
feat(signing): register env and HSM provider hooks for assurance
fraware
committed
test(signing): cover SAL tiers and production minimum enforcement
fraware
committed
docs(signing): document signing assurance levels
fraware
committed
feat(akta): freeze review summary contract schema
fraware
committed
feat(akta): emit contract-stable review summaries
fraware
committed
chore(akta): bump integration contract version constant
fraware
committed
test(akta): lock review summary contract shape
fraware
committed
docs(akta): document frozen review summary contract
fraware
committed
feat(engine): wire identity, authority, and assurance into ScopeEngine
fraware
committed
test(evals): add identity assurance caller IAL0 scenario
fraware
committed
test(evals): add queue invalid transition scenario
fraware
committed
test(evals): add fail_closed grant blocked scenario
fraware
committed
test(evals): extend runner for v0.7 institutional scenarios
fraware
committed
test(decisions): cover session grant provenance finalization
fraware
committed
test(review-queue): align queue tests with workflow states
fraware
committed
test(rest): adjust API tests for v0.7 queue and ledger behavior
fraware
committed
test(institutional): update pilot fixtures expectations
fraware
committed
test(akta): refresh golden and command tests for contract
fraware
committed
test(eval): sync extended eval harness assertions
fraware
committed
test(metrics): update quality metrics fixtures
fraware
committed
test(signing): align identity signing tests with assurance
fraware
committed
test(keys): update key registry expectations
fraware
committed
policy(v0.7): refresh approval_scopes.yaml for pilot bundle
fraware
committed
policy(v0.7): refresh blocked_tool_severity.yaml for pilot bundle
fraware
committed
policy(v0.7): refresh decision_options.yaml for pilot bundle
fraware
committed
policy(v0.7): refresh expiration_rules.yaml for pilot bundle
fraware
committed
policy(v0.7): refresh identity_mapping.yaml for pilot bundle
fraware
committed
policy(v0.7): refresh org_rbac.yaml for pilot bundle
fraware
committed
policy(v0.7): refresh quality_metrics.yaml for pilot bundle
fraware
committed
policy(v0.7): refresh reviewer_assignments.yaml for pilot bundle
fraware
committed
policy(v0.7): refresh reviewer_key_registry.yaml for pilot bundle
fraware
committed
policy(v0.7): refresh reviewer_roles.yaml for pilot bundle
fraware
committed
policy(v0.7): refresh role_to_action_matrix.yaml for pilot bundle
fraware
committed
policy(v0.7): refresh scope_to_tool_matrix.yaml for pilot bundle
fraware
committed
policy(v0.7): refresh workflow_escalation.yaml for pilot bundle
fraware
committed
chore(examples): refresh institutional pilot artifacts
fraware
committed
chore(examples): bump context versions in protocol change review
fraware
committed
chore(examples): bump context versions in protocol drift
fraware
committed
chore(examples): bump stale grant attempt contexts
fraware
committed
chore(examples): bump weak evidence review context
fraware
committed
docs: note v0.7 institutional limitations
fraware
committed
docs: clarify trusted boundary for v0.7
fraware
committed
docs: update README for v0.7 pilot features
fraware
committed
docs(changelog): add v0.7.0 institutional pilot hardening notes
fraware
committed
feat(schema): extend decision provenance for identity and authority audit
fraware
committed
feat(schema): mirror grant provenance fields for authority_checks
fraware
committed
feat(schema): add identity_source to identity assurance records
fraware
committed
feat(schema): document production_mode on AKTA review summary
fraware
committed
feat(schema): allow escalation metadata on review queue entries
fraware
committed
feat(authority): record authority_checks separate from RBAC permission
fraware
committed
feat(identity): align identity_source with role_resolution_source
fraware
committed
fix(validation): defer schema validation until provenance is merged
fraware
committed
feat(engine): wire authority provenance, IAL1 signing, and queue workflow
fraware
committed
feat(review): support information_received queue transition
fraware
committed
feat(review): persist escalation reason and actor on queue entries
fraware
committed
feat(dashboard): style review queue states for operator clarity
fraware
committed
feat(akta): include production_mode in review summary artifact
fraware
committed
feat(cli): expose queue information_received and escalation options
fraware
committed
feat(rest): add review queue transition endpoints
fraware
committed
test(authority): cover authority_checks provenance on decisions
fraware
committed
test(identity): expand IAL resolution and local signed paths
fraware
committed
test(akta): assert signed summary and production_mode contract
fraware
committed
test(review): cover information_received and escalation ledger
fraware
committed
test(dashboard): render extended review queue workflow states
fraware
committed
test(rest): exercise queue transitions and validation errors
fraware
committed
test(session): propagate authority provenance into session grants
fraware
committed
ci: run extended eval scenarios in PowerShell pipeline
fraware
committed
ci: run extended eval scenarios in shell pipeline
fraware
committed
feat(evals): extend runner for AKTA, OIDC, and SAL scenarios
fraware
committed
test(evals): expect 21 extended review-case scenarios
fraware
committed
eval: add local signed IAL1 identity assurance scenario
fraware
committed
eval: add signed AKTA review summary scenario
fraware
committed
eval: tighten IAL0 caller-supplied identity scenario
fraware
committed
eval: assert IAL3 on OIDC mock identity path
fraware
committed
eval: align production signing sequence with SAL1 policy
fraware
committed
docs(readme): pilot onboarding for v0.7 assurance features
fraware
committed
docs(pilot): update institutional pilot guide for v0.7
fraware
committed
docs(rbac): document authority_checks two-stage model
fraware
committed
docs(identity): describe identity_source and IAL aliases
fraware
committed
docs(akta): note production_mode on review summary contract
fraware
committed
docs(changelog): record v0.7 audit and assurance fixes
fraware
committed
docs(examples): refresh institutional pilot example README
fraware
committed
docs(readme): polish landing page for v0.7 release
fraware
committed
docs(trusted_boundary): clarify in-repo vs external trust
fraware
committed
docs(limitations): state non-goals and deployment boundaries
fraware
committed
docs(identity_assurance): refine IAL tiers for operators
fraware
committed
docs(rbac): tighten scope authority role rules
fraware
committed
docs(signing): document SAL tiers and production gates
fraware
committed
docs(akta): sharpen review packet contract
fraware
committed
docs(akta): update integration walkthrough
fraware
committed
docs(akta): polish scope demo narrative
fraware
committed
docs(integration): unify external adapter contracts
fraware
committed
docs(keys): clarify registry and rotation guidance
fraware
committed
docs(quality): explain queue and review metrics
fraware
committed
docs(pilot): streamline institutional onboarding
fraware
committed
docs(reviewer): improve decision workflow guidance
fraware
committed
docs(threat): refresh assumptions and mitigations
fraware
committed
docs(ssa): clarify scoped authorization model
fraware
committed
docs(doctrine): state review principles
fraware
committed
docs(thesis): refine field narrative for v0.7
fraware
committed
docs(pf_core): update obligation bridge notes
fraware
committed
docs(pcs): document packaging export format
fraware
committed
docs(evidence): align vocabulary with packet fields
fraware
committed
docs(akta/examples): refresh adapter sample README
fraware
committed
docs(pcs/examples): refresh PCS adapter README
fraware
committed
docs(pf_core/examples): refresh PF-Core adapter README
fraware
committed
fix(pf_core): align sample obligation protocol version
fraware
committed
docs(examples): update institutional pilot scenario README
fraware
committed
docs(examples): clarify protocol change review scenario
fraware
committed
docs(examples): clarify protocol drift scenario
fraware
committed
docs(examples): clarify publication claim review scenario
fraware
committed
docs(examples): clarify queue prioritization scenario
fraware
committed
docs(examples): clarify stale grant attempt scenario
fraware
committed
docs(examples): clarify weak evidence validation scenario
fraware
committed
examples: add domain scientist reviewer fixture
fraware
committed
examples: add domain scientist decision fixture
fraware
committed
examples: add protocol owner decision fixture
fraware
committed
examples(weak_evidence): fix primary decision fixture
fraware
committed
examples(weak_evidence): add domain scientist decision
fraware
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.