Cut the merge gate to what can run as a required CI check - #335

Merged

lamemustafa merged 28 commits into

tapish-codex/rectify-merge-gate-clean-20260913

Sep 15, 2026

Commits on Sep 13, 2026

Rectify incomplete merge preflight evidence
t
committed
99623f7
Rectify merge gate evidence controls
t
committed
76b02e9
fix: reject structural-only policy summaries and reseal workflow
t
committed
925465c
fix: fail closed on merge-gate review evidence
t
committed
ae12d1b
Harden merge-gate review evidence
t
committed
914ea74
Tighten platform evidence continuations
t
committed
0f50605
Bound platform evidence list continuations
t
committed
d3d5bd8
Avoid literal home paths in gate fixtures
t
committed
2023ab4
fix(gate): close review evidence gaps
t
committed
c5222cd
fix(gate): harden platform and credential checks
t
committed
91404d7
test(gate): cover renamed sensitive paths
t
committed
4fda1e2
fix(gate): require affirmative platform evidence
t
committed
2c73c64
test: avoid privacy scan fixture false positives
t
committed
6f958f2
fix: require security review for bank import credentials
t
committed
3cadc52
fix: require security review for cache token handling
t
committed
441a7ba
fix: strengthen merge-gate security evidence
t
committed
204c4b5
test: qualify workflow security fixtures
t
committed
4dfe339
fix: extend merge gate credential and privacy coverage
t
committed
d16416d
fix: extend merge gate credential boundaries
t
committed
7a29762

Commits on Sep 14, 2026

rectify: modularize merge gate privacy policy
t
committed
5f5fd22
rectify: validate skipped CI jobs at final fence
t
committed
78a3931
rectify: review credential dependency lockfiles
t
committed
c033dd4
rectify: harden privacy and security review gates
t
committed
57799cb
rectify: classify quoted credential assignments
t
committed
f41d634
rectify: harden merge gate final fences
t
committed
92d151c

Commits on Sep 15, 2026

merge-gate: cut to only what runs as a real required CI check

t
and
claude
committed
a1fdf17
test(merge-gate): lock in coverage for all 11 surviving PR #335 privacy findings

t
and
claude
committed
fafa8ac
Merge master and reseal after cutting the merge gate

t
and
claude
committed
1fdd08d