feat(sandbox): build and verify patch-validator image

[seonghobae]

Superseded historical predecessor

This branch is retained as historical lineage only and must not be merged.

Canonical successor PR #407 has now been integrated into protected main as squash commit 8ce7c7536888ec0b596e18368eedd9379deec64f after exact-head Application CI, reviewer-ci, central Security Scan, and the dedicated patch-validator-image workflow all reached terminal success with zero unresolved review findings.

Historical identity:

• branch: feat/patch-validator-image-supply-chain
• exact head: abc038ce48266b93df112df4d9541dad90fa640c
• historical feature base: feat/quarantined-patch-validation at 5c2e6762d07598094e5301c491d15ba83dcdcd51
• protected successor truth: main at 8ce7c7536888ec0b596e18368eedd9379deec64f

A final semantic comparison against the integrated successor confirms the valuable patch-validator image/runtime/supply-chain surface remains present in protected main: exact-head image workflow, Dockerfiles, static runtime, validator runtime/profile, reviewer image integration, receipt/SBOM/scanner verification, supply-chain documentation, and the patch-validator regression families. The two historical docs/superpowers/... design/plan artifacts do not appear as removed differences, while the integrated successor contains substantial additional hardening.

Historical checks or reviews on this PR do not transfer authority to protected main; #407 supplied its own exact-head and protected-base evidence. This PR is therefore closed as superseded rather than merged.

Related: #5, #9, #66, #407.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: dcd9e8dd-4b5b-496e-a11e-e058491edebc

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}