Skip to content

Rectify incomplete merge-gate evidence #321

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
lamemustafa wants to merge 53 commits into from
Closed

Rectify incomplete merge-gate evidence #321

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
53 commits
Select commit Hold shift + click to select a range
f1b949c
tooling: write the merge gate down, with each rule's failure beside it
Sep 12, 2026
b2ea606
tooling: fix ten defects in the gate, including one it was written to…
Sep 12, 2026
04c5e31
tooling: excuse padded fixtures, and keep the scan's own file clean
Sep 12, 2026
c6cdddc
tooling: close two spoofable holes and stop exempting silently
Sep 12, 2026
966b90a
tooling: a seven-hex prefix is grindable, and `++` is content
Sep 12, 2026
a0c86dd
tooling: catch a reseal that never ran, before a reviewer has to
Sep 12, 2026
c19255a
tooling: the scan reads its own file, so stop illustrating leaks with…
Sep 12, 2026
7270da8
fix: make merge gate fail closed on unknown evidence
Sep 12, 2026
9daeb69
fix: fail closed on incomplete merge evidence
Sep 12, 2026
b456307
fix(tooling): reject empty file evidence and invalid page counts
Sep 12, 2026
daa0e4a
fix: complete merge-gate evidence coverage
Sep 12, 2026
cdbcdc9
Merge remote-tracking branch 'origin/master' into tapish-codex/rectif…
Sep 12, 2026
1d81ac7
tooling: write the merge gate down, with each rule's failure beside it
Sep 12, 2026
57c5a00
tooling: fix ten defects in the gate, including one it was written to…
Sep 12, 2026
5c87b00
tooling: excuse padded fixtures, and keep the scan's own file clean
Sep 12, 2026
c9fe9d5
tooling: close two spoofable holes and stop exempting silently
Sep 12, 2026
18869f7
tooling: a seven-hex prefix is grindable, and `++` is content
Sep 12, 2026
137a107
tooling: catch a reseal that never ran, before a reviewer has to
Sep 12, 2026
933f3a9
tooling: the scan reads its own file, so stop illustrating leaks with…
Sep 12, 2026
466f27f
tooling: a check an attacker can satisfy is worse than no check
Sep 12, 2026
4bf12f0
Harden merge gate lineage and compatibility pins
Sep 12, 2026
d668a18
Complete merge gate review and CI evidence paths
Sep 12, 2026
75e8565
Merge remote-tracking branch 'origin/master' into tapish-codex/rectif…
Sep 12, 2026
bebb368
fix(gate): require complete hunk evidence
Sep 12, 2026
449e05f
Merge verified external gate controls
Sep 12, 2026
898fced
test(gate): cover hunk metadata boundaries
Sep 12, 2026
49d9320
fix: bind merge policy and retain grouped identifier coverage
Sep 12, 2026
94ff880
Merge remote-tracking branch 'origin/master' into tapish-codex/rectif…
Sep 12, 2026
c9b1e99
chore: seal required merge-gate CI coverage
Sep 12, 2026
319774f
fix: complete merge gate evidence checks
Sep 12, 2026
b6c293a
Merge commit '9da3b7205a79c30eaf901e52618155e0860c55a6' into tapish-c…
Sep 12, 2026
c3d413a
chore: reseal merge gate preflight
Sep 12, 2026
8275600
fix: verify complete PR commit metadata
Sep 12, 2026
0330134
test(merge-gate): cover date and mobile scan boundaries
Sep 12, 2026
16fbe47
test(merge-gate): keep synthetic scan controls safe
Sep 12, 2026
a24751e
fix(gate): close preflight evidence gaps
Sep 12, 2026
1a53639
fix(gate): cover workflow path transitions
Sep 12, 2026
7eb0e7f
fix(gate): require renamed source paths
Sep 12, 2026
26baf27
test: construct synthetic grouped identifiers at runtime
Sep 12, 2026
127a88f
Harden merge gate review evidence
Sep 12, 2026
73d08e3
Bind merge-gate evidence to current head
Sep 12, 2026
bd0ab9a
Rectify final-head policy evidence and parser portability
Sep 12, 2026
6c5ecd3
Rectify refreshed checks and review evidence boundaries
Sep 12, 2026
0c0db06
Integrate reviewed catalogue changes from master
Sep 12, 2026
efa0b8b
fix: bound merge gate evidence payloads
Sep 12, 2026
72d2c41
fix: paginate combined commit statuses
Sep 12, 2026
c0bcf54
fix: keep malformed check diagnostics indeterminate
Sep 12, 2026
16464a6
fix: complete merge gate policy evidence
Sep 12, 2026
830c028
fix: reject unsupported gate evidence placeholders
Sep 12, 2026
0be895d
fix: harden merge gate evidence parsing
Sep 12, 2026
2151a22
test: verify visible policy and retained diagnostic paths
Sep 12, 2026
d7ac50d
Merge master mode-preservation fix and regenerate compatibility metadata
Sep 12, 2026
7ea1235
fix: require implementation rationale for PowerShell and SQL
Sep 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -138,6 +138,7 @@ jobs:
- run: python3 scripts/retain-macos-test-binaries.test.py
- run: python3 scripts/bank_statement_import.test.py
- run: python3 scripts/sanitise-bbox-capture.test.py
- run: python3 scripts/merge-gate.test.py
Comment thread
lamemustafa marked this conversation as resolved.

tally-portable:
name: Tally portable core
Expand Down
2 changes: 1 addition & 1 deletion docs/tally/compatibility/compatibility-matrix.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
{
"schema_version": 1,
"bridge_commit_sha": "be1c20cc3fd66fa1ece196505c69f26e555e4b8e",
"compatibility_surface_sha256": "74ac4427cf03860e7d4a7005682cccaa3d2544366e87f50fbe53ee79584a076b",
"compatibility_surface_sha256": "bef1632064166f9b80ff3beef9d0196b92667e4670d0834cdd183651a19a062a",
"claims": [
{
"claim_id": "erp9-6-6-3-windows-education-xml-one-company",
Expand Down
4 changes: 2 additions & 2 deletions docs/tally/compatibility/compatibility-surface.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
"files": [
{
"path": ".github/workflows/ci.yml",
"sha256": "2d2220d0dc1942eab04034dbfd07f5ecf693cc7d5f47b1e31615fe17e4b2f140"
"sha256": "f1d96290429f3d7d9821440ad989fc68b41d8ee3c99106d0c93151c95b03b6d1"
},
{
"path": ".github/workflows/dependency-security.yml",
Expand Down Expand Up @@ -850,5 +850,5 @@
"sha256": "a8ac2714fecf51947f2822c8c46d7ce2e8602c732780ff60566a7771f0836f9a"
}
],
"manifest_sha256": "74ac4427cf03860e7d4a7005682cccaa3d2544366e87f50fbe53ee79584a076b"
"manifest_sha256": "bef1632064166f9b80ff3beef9d0196b92667e4670d0834cdd183651a19a062a"
}
Loading