Skip to content

Complete tinytrace v1 correctness, privacy, and release hardening - #1

Merged
garvj65 merged 9 commits into
mainfrom
codex/v1-hardening
Oct 20, 2026
Merged

garvj65 merged 9 commits into
mainfrom
codex/v1-hardening

Conversation

@garvj65

@garvj65 garvj65 commented Oct 20, 2026 •

Copy link
Copy Markdown
Owner

Fix shutdown ownership across persistent, one-shot, and prepended host handlers before and after initialization. Delegation remains stable during asynchronous host cleanup until reinitialization.

Adds default field/key redaction, generic fatal diagnostics, validated immutable hook output, correctly budgeted Retry-After handling (including dates and overflowing integers), and separate event fingerprint namespaces.

Verified current head 8b74d0d:

  • 39 tests pass on Linux Node 22/24/26 and Windows Node 24.
  • Clean-consumer HTTP/redaction/declaration checks pass; runtime dependencies remain zero.
  • 789 handwritten code lines, including tests and verification scripts.
  • Full reachable-history Gitleaks scan reports no leaks; CodeQL security-extended reports zero findings; npm advisory checks report zero known vulnerabilities; all three development packages have verified registry signatures.
  • Remote contents match all 31 reviewed text files. CI retains the verified npm tarball.

CI: https://github.com/garvj65/tinytrace/actions/runs/39464453402

Prepares version 1.0.0 and an exact-commit gated npm release with provenance and registry-integrity verification. Publishing is attempted only after trusted merged-main CI succeeds; npm account/scope authentication may still require setup. Privacy matching and in-memory delivery have explicit documented limits; passing checks are not a guarantee that every possible defect is absent.

@garvj65 garvj65 changed the title Complete tinytrace v1 correctness and security hardening Complete tinytrace v1 correctness, privacy, and release hardening Oct 20, 2026
@garvj65
garvj65 marked this pull request as ready for review October 20, 2026 17:15
@garvj65
garvj65 merged commit 769eef5 into main Oct 20, 2026
12 checks passed
@garvj65
garvj65 deleted the codex/v1-hardening branch October 21, 2026 08:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant