docs(operations): record runner audit credential and assignment contract - #401

Closed

cursor[bot] wants to merge 23 commits into

mainfrom

cursor/bc-4a09cba8-1cd3-4c2d-9b3a-a9b274ba2469-18b3

Commits on Aug 16, 2026

test(security): require runner audit token redaction
seonghobae
committed
e7ecfea
fix(security): redact runner audit credential errors
seonghobae
committed
bdb4864
fix(security): keep token redaction coverage exact
seonghobae
committed
a39f9fd
test(security): cover missing gh stderr redaction path
seonghobae
committed
f0d4aed
test(operations): reproduce queued job timestamp false assignment
seonghobae
committed
fb04907
fix(operations): require runner identity for assignment evidence
seonghobae
committed
9f2557d
test(docs): reject timestamp runner-assignment authority
seonghobae
committed
2cd4103
docs(operations): align runner assignment authority
seonghobae
committed
b4e0f99
test(security): require runner audit token capability
seonghobae
committed
5752552
fix(security): broker runner audit token capability
seonghobae
committed
fa0cefd
test(docs): require runner token capability contract
seonghobae
committed
627b0cb
docs(security): document runner token capability ingress
seonghobae
committed
c58fed9
test(security): align default runner audit credential ingress
seonghobae
committed
61c6892
fix(operations): normalize runner audit failure boundaries
seonghobae
committed
bbbfe8e
test(operations): align production runner audit capability boundary
seonghobae
committed
0634ba5
merge: integrate protected main after #396
seonghobae
committed
fe09e34
fix(operations): preserve malformed JSON evidence contract
seonghobae
committed
5f861fb
merge: restack runner audit on protected main a634066
seonghobae
committed
b0a7a38
fix(coverage): remove unreachable GitHub API default branch
seonghobae
committed
c866654
test(security): prove delegated runner audit token wins
seonghobae
committed
f387edf
test(security): reject ambient runner audit credential selection
seonghobae
committed
c4a0ffb
test: cover non-error runner audit rejection
seonghobae
committed
f4a4bc9
docs(operations): record runner audit credential and assignment contract

cursoragent
and
seonghobae
committed
64c6213

Navigation Menu

Uh oh!

docs(operations): record runner audit credential and assignment contract - #401

docs(operations): record runner audit credential and assignment contract#401
cursor[bot] wants to merge 23 commits into
mainfrom
cursor/bc-4a09cba8-1cd3-4c2d-9b3a-a9b274ba2469-18b3

Commits on Aug 16, 2026

test(security): require runner audit token redaction

fix(security): redact runner audit credential errors

fix(security): keep token redaction coverage exact

test(security): cover missing gh stderr redaction path

test(operations): reproduce queued job timestamp false assignment

fix(operations): require runner identity for assignment evidence

test(docs): reject timestamp runner-assignment authority

docs(operations): align runner assignment authority

test(security): require runner audit token capability

fix(security): broker runner audit token capability

test(docs): require runner token capability contract

docs(security): document runner token capability ingress

test(security): align default runner audit credential ingress

fix(operations): normalize runner audit failure boundaries

test(operations): align production runner audit capability boundary

merge: integrate protected main after #396

fix(operations): preserve malformed JSON evidence contract

merge: restack runner audit on protected main a634066

fix(coverage): remove unreachable GitHub API default branch

test(security): prove delegated runner audit token wins

test(security): reject ambient runner audit credential selection

test: cover non-error runner audit rejection

docs(operations): record runner audit credential and assignment contract