fix(operations): require honest post-disablement audit receipts - #398

Merged

seonghobae merged 32 commits into

mainfrom

cursor/bc-c0739eb2-170e-4554-8574-3f273e1ac604-0729

Aug 16, 2026

Commits on Aug 16, 2026

test(operations): specify single-orphan live disablement
seonghobae
committed
9084727
feat(operations): execute one verified orphan disablement
seonghobae
committed
867a09a
test(coverage): measure workflow disable operator
seonghobae
committed
8f72348
Merge protected main into workflow registry operator
seonghobae
committed
298aa7c
test(coverage): exercise live disable operator boundaries
seonghobae
committed
4a35eba
test(coverage): align malformed JSON assertion with fail-closed scanner
seonghobae
committed
86bad40
Merge protected main into workflow registry operator
seonghobae
committed
5532160
test(operations): define deterministic live-disable CLI boundary
seonghobae
committed
ba0797d
fix(operations): isolate live-disable CLI dispatch
seonghobae
committed
f9b01e0
fix(ops): remove unreachable workflow JSON parse branch
seonghobae
committed
087aa75
test(ops): cover live disable executable path
seonghobae
committed
528473c
test(ops): exercise live-disable fail-closed branches
seonghobae
committed
d6a8ca3
test(ops): cover live-disable default and nullish boundaries
seonghobae
committed
5f787bd
test(ops): exercise residual live-disable evidence branches
seonghobae
committed
17d250c
test(coverage): exercise absent post-audit workflow records
seonghobae
committed
6107d92
test(security): reject ambiguous privileged GitHub JSON
seonghobae
committed
73e6674
fix(operations): harden disablement JSON boundary
seonghobae
committed
aa55838
fix(operations): preserve malformed JSON diagnostic
seonghobae
committed
da82dc7
test(security): reproduce fine-grained token diagnostic leak
seonghobae
committed
d4f9756
fix(security): redact fine-grained tokens from CLI failures
seonghobae
committed
99d3f90
fix(operations): remove unreachable JSON parse branch
seonghobae
committed
bbdb3b3
test(operations): assert missing token capability failure
seonghobae
committed
82d5ad8
merge: integrate protected main after #396
seonghobae
committed
004315e
test(operations): pin bounded invalid-JSON diagnostic
seonghobae
committed
15b642d
fix(operations): normalize malformed GitHub JSON failures
seonghobae
committed
1a2dee6
merge: restack workflow disablement on protected main a634066
seonghobae
committed
d09ac4b
test(operations): reject invalid disablement before credential read
seonghobae
committed
1ef3fc7
fix(operations): validate disablement before credential read
seonghobae
committed
1648e46
test(operations): exercise non-Error CLI failure contract
seonghobae
committed
d1aff09
test(operations): prove absent fetch capability
seonghobae
committed
8956df0
fix(operations): require honest post-disablement audit receipts

cursoragent
and
seonghobae
committed
1e40cee
test(operations): close live-disable coverage at the receipt boundary

cursoragent
and
seonghobae
committed
0a15b9e

Navigation Menu

Uh oh!

fix(operations): require honest post-disablement audit receipts - #398

fix(operations): require honest post-disablement audit receipts#398
seonghobae merged 32 commits into
mainfrom
cursor/bc-c0739eb2-170e-4554-8574-3f273e1ac604-0729

Commits on Aug 16, 2026

test(operations): specify single-orphan live disablement

feat(operations): execute one verified orphan disablement

test(coverage): measure workflow disable operator

Merge protected main into workflow registry operator

test(coverage): exercise live disable operator boundaries

test(coverage): align malformed JSON assertion with fail-closed scanner

Merge protected main into workflow registry operator

test(operations): define deterministic live-disable CLI boundary

fix(operations): isolate live-disable CLI dispatch

fix(ops): remove unreachable workflow JSON parse branch

test(ops): cover live disable executable path

test(ops): exercise live-disable fail-closed branches

test(ops): cover live-disable default and nullish boundaries

test(ops): exercise residual live-disable evidence branches

test(coverage): exercise absent post-audit workflow records

test(security): reject ambiguous privileged GitHub JSON

fix(operations): harden disablement JSON boundary

fix(operations): preserve malformed JSON diagnostic

test(security): reproduce fine-grained token diagnostic leak

fix(security): redact fine-grained tokens from CLI failures

fix(operations): remove unreachable JSON parse branch

test(operations): assert missing token capability failure

merge: integrate protected main after #396

test(operations): pin bounded invalid-JSON diagnostic

fix(operations): normalize malformed GitHub JSON failures

merge: restack workflow disablement on protected main a634066

test(operations): reject invalid disablement before credential read

fix(operations): validate disablement before credential read

test(operations): exercise non-Error CLI failure contract

test(operations): prove absent fetch capability

fix(operations): require honest post-disablement audit receipts

test(operations): close live-disable coverage at the receipt boundary