chore(stack): sync #526 with protected main - #529
Closed
seonghobae wants to merge 1 commit into
Closed
Conversation
* test(acquisition): refresh manifest after license inventory * fix(acquisition): refresh manifest before integrity audit * test(acquisition): reject stale pre-audit manifest artifact * fix(acquisition): eliminate stale pre-audit manifest artifact * test(acquisition): bind source revalidation to canonical audit * test(acquisition): prevent duplicate manifest materialization * fix(acquisition): share audit output authority * fix(acquisition): unify conflicting output overrides * fix(acquisition): make audit orchestration portable * test(acquisition): require audit executable in buyer catalog * test(acquisition): hash canonical audit executable * test(acquisition): bind audit executable in composed catalog * fix(acquisition): hash canonical audit executable * test(acquisition): require one canonical hourly audit * fix(acquisition): remove duplicate hourly manifest * fix(acquisition): hash tracked blobs in process * fix(acquisition): support SHA-256 exact heads * fix(acquisition): carry SHA-256 commit identity * fix(release): produce SHA-256 commit evidence * fix(acquisition): pin stages to initial head * fix(acquisition): canonicalize stage revision * fix: support legacy Git tree inventory * chore(acquisition): preserve protected-main changelog truth * test(acquisition): reject source movement between audit stages * fix(acquisition): fail closed on source movement between stages * test(acquisition): reject tracked source drift during audit * fix(acquisition): authenticate tracked source between audit stages * fix(acquisition): authenticate inventory input bytes * test(acquisition): bind dependency inventory to claimed commit * test(acquisition): preserve source-binding diagnostic * test(acquisition): revalidate source after failed stage * fix(acquisition): revalidate source after stage failure * fix(acquisition): revalidate failed stages * docs(acquisition): document SHA-256 commit identities * test(acquisition): match failed-stage preflight diagnostic * test(acquisition): cover empty pinned file bytes
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Team Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closed without merge: GitHub's live three-way merge reports conflicts for protected
main@5aad3e410703faaf52882e2f33fadd25d217bcddinto canonical #526 head2c5d6378f4842008e250f00b1a1aa8c79f76c811. No branch or source ref was changed. Canonical #526 remains the only delivery lane; convergence requires an explicit semantic merge of overlapping acquisition files.