fix(acquisition): authenticate data-room manifest evidence - #69

Merged

seonghobae merged 177 commits into

mainfrom

fix/acquisition-manifest-integrity

Aug 17, 2026

Commits on Aug 6, 2026

Commits on Aug 7, 2026

test(acquisition): cover fail-closed integrity branches
seonghobae
committed
c6d46cc
test(acquisition): close remaining branch coverage gaps
seonghobae
committed
30ac811
test(acquisition): fail closed on Git status probe errors
seonghobae
committed
e7fc2d1
test(acquisition): assert audit exit contracts
seonghobae
committed
eaf7120
test(acquisition): reject symlink output targets
seonghobae
committed
5e84f60
fix(acquisition): add no-follow private output writer
seonghobae
committed
cd749f1
fix(acquisition): refuse unsafe manifest output targets
seonghobae
committed
387056f
fix(acquisition): refuse unsafe audit output targets
seonghobae
committed
3d17eb9
test(acquisition): cover private output trust boundary
seonghobae
committed
bb2ab1a
test(acquisition): enforce private output coverage
seonghobae
committed
9815b6f
docs(acquisition): document no-follow output boundary
seonghobae
committed
dba2365
docs(doctoring): justify no-follow evidence outputs
seonghobae
committed
77acf18
docs(doctoring): keep repository citations portable
seonghobae
committed
7a76f63
docs(changelog): record safe acquisition output writes
seonghobae
committed
7af1ee5
test(acquisition): expose local worktree redirection
seonghobae
committed
b5fc412
fix(acquisition): bind Git preflight worktree
seonghobae
committed
9ed61f1
docs(acquisition): bind audited Git worktree
seonghobae
committed
e6855c5
docs(changelog): record Git worktree binding
seonghobae
committed
721d60b
docs(doctoring): justify Git worktree binding
seonghobae
committed
5c656a5
test(acquisition): expose clean-filter trust bypass
seonghobae
committed
e7675ef
fix(acquisition): isolate tracked comparisons from filters
seonghobae
committed
df7498b
test(acquisition): cover split tracked comparisons
seonghobae
committed
4b2e7bb
test(acquisition): reproduce parent symlink output escape
seonghobae
committed
397ee32
docs(acquisition): isolate source checks from clean filters
seonghobae
committed
53799ea
test(acquisition): cover parent symlink entrypoint escapes
seonghobae
committed
eb231f4
fix(acquisition): reject symbolic-link output parents
seonghobae
committed
b6658e6
fix(acquisition): validate manifest output parents before mkdir
seonghobae
committed
26fae39
fix(acquisition): validate audit output parents before mkdir
seonghobae
committed
ed1eeeb
test(acquisition): cover parent-chain validation branches
seonghobae
committed
df1b873
docs(doctoring): localize acquisition worktree binding
seonghobae
committed
cac170d
docs(acquisition): document parent symlink output boundary
seonghobae
committed
26994d2
docs(doctoring): record output parent path integrity rationale
seonghobae
committed
e0cb239
docs(changelog): record parent symlink output hardening
seonghobae
committed
65eac8d
test(acquisition): require permission hardening before content mutation
seonghobae
committed
869a72c
fix(acquisition): harden output permissions before content mutation
seonghobae
committed
4b33e1d
test(acquisition): preserve content when permission hardening fails
seonghobae
committed
7c92c05
docs(acquisition): harden permissions before output mutation
seonghobae
committed
1bfc200
docs(doctoring): bind output mutation to prior permission hardening
seonghobae
committed
4bbfe1d
docs(changelog): record permission-before-mutation output hardening
seonghobae
committed
fcfcd3f
test(ci): require exact live pull-request head verification
seonghobae
committed
07e8e91
fix(ci): verify the exact live pull-request head
seonghobae
committed
1a663f1
fix(ci): bind reviewer verification to the live PR head
seonghobae
committed
37bbe30
docs(ci): define exact-head pull-request verification
seonghobae
committed
b59a020
docs(doctoring): justify exact-head CI binding
seonghobae
committed
491044d
docs(changelog): record exact-head CI binding
seonghobae
committed
a750d38
test(ci): keep PR metadata token out of untrusted test steps
seonghobae
committed
1b9f0ec
fix(ci): scope PR metadata token to stale-head checks
seonghobae
committed
8e2aeb9
fix(ci): isolate PR metadata token from reviewer execution
seonghobae
committed
0e323d2
docs(ci): keep metadata token out of PR-controlled execution
seonghobae
committed
a1228ba
docs(doctoring): scope metadata token away from PR code
seonghobae
committed
f58fa99
test(acquisition): expose repository stat-cache drift bypass
seonghobae
committed
a71c206
fix(acquisition): override Git stat-cache trust settings
seonghobae
committed
57a1dd8
test(acquisition): require raw tracked-byte authentication
seonghobae
committed
8b8134b
test(acquisition): require strict Git stat policy
seonghobae
committed
8cab30f
fix(acquisition): authenticate raw tracked Git blob bytes
seonghobae
committed
bd46741
test(acquisition): cover tracked-byte index refusal paths
seonghobae
committed
834b4ba
test(acquisition): cover raw tracked-byte verifier
seonghobae
committed
38b59e4
test(acquisition): cover tracked-object hashing failures
seonghobae
committed
52ec38b
test(acquisition): enforce byte budget before hashing
seonghobae
committed
89c168f
fix(acquisition): enforce byte budgets before blob hashing
seonghobae
committed
5d87c73
docs(acquisition): document raw tracked-byte authentication
seonghobae
committed
52cb39b
docs(doctoring): justify raw Git content authentication
seonghobae
committed
8dd6c89
test(acquisition): require descriptor-bound raw byte verification
seonghobae
committed
788d79d
fix(acquisition): bind raw Git hashing to no-follow descriptors
seonghobae
committed
38957d5
test(acquisition): consolidate descriptor-bound blob coverage
seonghobae
committed
29d0a88
test(acquisition): fold byte budgets into descriptor tests
seonghobae
committed
5af3fc2
test(acquisition): consolidate descriptor-bound content coverage
seonghobae
committed
cde92c5
test(acquisition): reach invalid executable-mode metadata branch
seonghobae
committed
f732327
docs(acquisition): align raw-byte authentication with descriptors
seonghobae
committed
69f2e27
docs(doctoring): bind Git content evidence to descriptors
seonghobae
committed
38aa07f
test(acquisition): cover empty path and malformed index header
seonghobae
committed
a8f8033
docs(changelog): record descriptor-bound Git byte authentication
seonghobae
committed
4148919
test: reject index rewrite against exact acquisition tree
seonghobae
committed
c0de3ab
fix: bind acquisition raw-byte inventory to exact HEAD tree
seonghobae
committed
56d8a8c
docs: bind acquisition bytes to immutable exact tree
seonghobae
committed
9c6e593
docs: doctor immutable exact-tree acquisition authority
seonghobae
committed
fe3a12e
test: cover clean and malformed exact-tree identities
seonghobae
committed
e7581cf
test: align tracked-source failure contract
seonghobae
committed
6ec5a2c
test: require exact tree for production byte authentication
seonghobae
committed
55f360f
fix: require immutable tree identity for production byte reads
seonghobae
committed
5c58dae
test: bind racy Git regression to immutable exact tree
seonghobae
committed
11cae5b
test(acquisition): bind changelog to exact-tree authority
seonghobae
committed
b630fbf
docs(acquisition): correct exact-tree byte authority
seonghobae
committed
3a4500d
test(docs): require integrity in buyer release gate
seonghobae
committed
2077f78
docs(acquisition): include integrity in release gate
seonghobae
committed
bf41d7d

Commits on Aug 9, 2026

Commits on Aug 10, 2026

Commits on Aug 16, 2026