fix(operations): require honest post-disablement audit receipts - #398
Merged
seonghobae merged 32 commits intoAug 16, 2026
Conversation
Refuse a live-disable receipt unless the second full audit is a schema-v1 PASS/FAIL envelope, this workflow leaves the active-orphan set, and a single-candidate plan finishes clean. Surface residual failure codes and orphan IDs so the operator can invoke the next exact disablement. Co-authored-by: Seongho Bae <seonghobae@users.noreply.github.com>
Cover advertised GitHub Content-Length refusal, default CLI exit-code assignment, omitted repository defaults, and residual orphan-id sorting so the honest post-audit envelope stays at 100% statements, branches, functions, and lines. Co-authored-by: Seongho Bae <seonghobae@users.noreply.github.com>
seonghobae
marked this pull request as ready for review
August 16, 2026 17:02
Contributor
Author
|
Bugbot is not enabled for your account, so this pull request was not reviewed. Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs. |
seonghobae
deleted the
cursor/bc-c0739eb2-170e-4554-8574-3f273e1ac604-0729
branch
August 16, 2026 17:02
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Purpose
Continue #392 / #226 on protected
maina634066by making the live orphan-disablement receipt an honest operator contract. This PR keeps the single-candidate, non-batch, no-self-repair boundary and adds the missing post-audit envelope plus the invocation docs an operator needs before touching the live registry.What changed
PASS/FAIL, this workflow ID has left theactive_orphan_workflowset, and a single-candidate plan finishesPASS.remaining_failure_codesandremaining_active_orphan_idsare printed so the next action is another exact-id invocation, not a guessed batch.npm run operations:workflow-registry-disable -- <id>is the named entrypoint.CHANGELOG.mdanddocs/doctoring/workflow-registry-disablement.mdnow state token-file order, receipt fields, and the meaning of exit 0 pluspost_audit_status: FAIL.User-Agentas the audit reader.npm run typecheckandnpm test(100% coverage thresholds) passed on this head.Boundaries
Do not merge #392 at
8956df0. This branch already contains that lineage plus the receipt/docs repair. No workflow is disabled by opening this PR. Actual disablement still requires a fresh audit and a delegated Actions-write token file at operator runtime. No ambient GitHub/model secret is accepted, and no governance/security/coverage threshold is weakened.Related: #226, #392.