fix(governance): preserve delegated capability path authority - #503

Merged

seonghobae merged 139 commits into

mainfrom

fix/workflow-registry-capability-path-authority

Aug 30, 2026

Commits on Aug 24, 2026

test(actions): bind runner evidence to current run attempt
seonghobae
committed
68236c5
fix(actions): fail closed on unscoped rerun evidence
seonghobae
committed
22db494
test(actions): cover rerun fail-closed boundary
seonghobae
committed
14e914b
test(actions): reject mismatched workflow run identity
seonghobae
committed
9d5ce57
fix(actions): bind fetched workflow run to selection
seonghobae
committed
7233e25
test(actions): require explicit workflow run attempt
seonghobae
committed
34cbf4c
fix(actions): require explicit workflow run attempt
seonghobae
committed
1c33680
test(actions): preserve workflow run attempt fixtures
seonghobae
committed
6313023
test(actions): scope job reads to exact workflow attempt
seonghobae
committed
628a9b1
fix(actions): read exact workflow-attempt jobs
seonghobae
committed
c0518e2
test(actions): use exact-attempt evidence fixture
seonghobae
committed
1e359f4
test(actions): bind delegated-token fixture to run attempt
seonghobae
committed
dea0759
docs(actions): describe exact-attempt job authority
seonghobae
committed
b625aaf
test(actions): cover invalid attempt adapter authority
seonghobae
committed
1ada155
test(actions): retain workflow attempt in assignment evidence
seonghobae
committed
544ea8a
fix(actions): retain workflow attempt in assignment evidence
seonghobae
committed
e0895b4
test(actions): reject symlinked delegated-token parents
seonghobae
committed
0820a44
fix(actions): reject symlinked delegated-token parents
seonghobae
committed
6ff79c7
refactor(actions): keep parent-symlink guard coverage-reachable
seonghobae
committed
f006dd2
test(actions): cover unverifiable delegated-token parents
seonghobae
committed
ff76f97
test(actions): align capability failures with parent hardening
seonghobae
committed
2dd3dc5
test(actions): reject delegated token path replacement during read
seonghobae
committed
1ff8cd7
fix(actions): bind delegated token bytes to capability pathname
seonghobae
committed
5e74c63
test(actions): reject non-canonical token capability path
seonghobae
committed
c79cd97
fix(actions): preserve exact token capability path authority
seonghobae
committed
502ebaf
test(actions): require attempt identity in evaluator
seonghobae
committed
972c0b1
fix(actions): fail closed on invalid attempt evidence
seonghobae
committed
9f93892
test(docs): require attempt-scoped runner audit contract
seonghobae
committed
2c8c887
docs(actions): align runner audit with attempt-scoped authority
seonghobae
committed
da8b548
test(actions): bind runner fixtures to current attempt
seonghobae
committed
e6a4edb
test(actions): bind timestamp fixture to current attempt
seonghobae
committed
ff57ac6
test(actions): reject coerced token capability paths
seonghobae
committed
8673cce
fix(actions): reject coerced token capability paths
seonghobae
committed
11cd8fc
fix(actions): preserve absent token-path contract
seonghobae
committed
ed9b381
test(actions): reject hard-linked delegated token capability
seonghobae
committed
94fb0ec
fix(actions): reject hard-linked delegated token capability
seonghobae
committed
bd9e5fb
fix(actions): preserve replacement-race failure classification
seonghobae
committed
150ae06
test(actions): accept attempt-scoped adapters independent of function arity
seonghobae
committed
6e51424
fix(actions): stop treating function arity as attempt authority
seonghobae
committed
4d6ab68
test(actions): retire function-arity reader authority
seonghobae
committed
4fdf778
test(actions): reject whitespace-bearing delegated tokens
seonghobae
committed
9b134b7
fix(actions): require canonical delegated bearer bytes
seonghobae
committed
68e8a0b
test(actions): reject normalized capability paths at CLI boundary
seonghobae
committed
143241b
fix(actions): preserve canonical capability path authority
seonghobae
committed
4e57a16

Commits on Aug 25, 2026

Commits on Aug 26, 2026

test(actions): reject format-only runner identity
seonghobae
committed
64f36e1
fix(actions): ignore format-only runner identity
seonghobae
committed
c876141
test(actions): reject normalized runner identity authority
seonghobae
committed
23d8cb7
fix(actions): reject non-canonical runner name authority
seonghobae
committed
933b8be
test(reviewer): require non-OpenSSL sandbox substrate
seonghobae
committed
350bdaf
fix(reviewer): use non-OpenSSL sandbox substrate
seonghobae
committed
b205ba4
fix(reviewer): scan non-OpenSSL sandbox image
seonghobae
committed
46d8401
fix(reviewer): converge sandbox substrate contracts
seonghobae
committed
f1360cc
test(reviewer): preserve hard vulnerability filtering
seonghobae
committed
4a492fc
test(reviewer): require Trivy fail-closed exit
seonghobae
committed
373e853
test(acquisition): reject post-rename evidence mutation
seonghobae
committed
3b774f2
fix(acquisition): bind final replacement version
seonghobae
committed
bd6b7d1
fix(acquisition): allow rename ctime while binding final evidence
seonghobae
committed
07b3769

Commits on Aug 27, 2026

test(acquisition): reject dot-segment output aliases
seonghobae
committed
ca19dd3
fix(acquisition): reject lexical output path aliases
seonghobae
committed
32d8ea4

Commits on Aug 28, 2026

test(auth): reject BOM-normalized delegated token
seonghobae
committed
c0803c0
fix(auth): preserve BOM bytes before bearer validation
seonghobae
committed
1fc9d5d
test(governance): reject BOM-normalized live audit JSON
seonghobae
committed
3b64a07
fix(governance): preserve live audit JSON BOM bytes
seonghobae
committed
ae3f26f
fix(governance): stop normalizing CLI JSON whitespace
seonghobae
committed
266b63d
test(governance): classify BOM as invalid CLI JSON
seonghobae
committed
b243971
fix(governance): classify malformed CLI JSON consistently
seonghobae
committed
c4631de

Commits on Aug 30, 2026