fix(bin): harden PR check artifacts - #556

Merged

kunchenguid merged 47 commits into

mainfrom

fm/fm-prcheck-security-patch-h5

Jul 16, 2026

Commits on Jul 16, 2026

fix: harden PR check artifacts
kunchenguid
committed
8cf0a6c
fix: close PR check migration gaps
kunchenguid
committed
5b6f5ad
fix: close PR check retry gaps
kunchenguid
committed
77259da
fix: clarify migration outcomes and ESM boundary
kunchenguid
committed
f4d10e0
fix: keep failed migrations authoritative
kunchenguid
committed
38976b3
test: use inert PR validation fixtures
kunchenguid
committed
50c3766
no-mistakes(review): Reserve noncanonical PR quarantine namespace
kunchenguid
committed
0aff1f2
no-mistakes(review): Prevalidate final PR-check teardown artifacts
kunchenguid
committed
3b7d0c0
no-mistakes(review): Preserve X metadata and validate teardown IDs
kunchenguid
committed
a3554ff
no-mistakes(review): Initialize migration state before watcher exclusion
kunchenguid
committed
3c6604d
no-mistakes(review): Isolate failed poll migrations from bootstrap recovery
kunchenguid
committed
c7ae840
no-mistakes(review): Allow safe polling during incomplete private repairs
kunchenguid
committed
18e5e10
no-mistakes(review): Authenticate watcher checks at execution time
kunchenguid
committed
63c3f81
no-mistakes(review): Preserve custom checks with hash-bound registration
kunchenguid
committed
f37f1c6
no-mistakes(review): Clean custom check snapshots on watcher signals
kunchenguid
committed
912c1fb
no-mistakes(review): Stop watcher checks promptly on signals
kunchenguid
committed
86308ac
no-mistakes(review): Terminate watcher check groups before cleanup
kunchenguid
committed
05baae9
no-mistakes(document): Correct stale X-mode watcher documentation
kunchenguid
committed
1491198
fix: drain returned watcher check groups
kunchenguid
committed
a52e615
no-mistakes(review): Harden quarantine links and recover validated replacement polls
kunchenguid
committed
0041966
no-mistakes(review): Preserve X mode across shim version transitions
kunchenguid
committed
3cc95b6
no-mistakes(review): Refresh legacy X shims before marker short-circuits
kunchenguid
committed
7bcc096
no-mistakes(document): Correct persisted PR-check artifact documentation
kunchenguid
committed
0d07d8b
no-mistakes(document): Correct stale PR-check documentation
kunchenguid
committed
4c2605a
fix: bind PR poll repair provenance
kunchenguid
committed
6766e4b
no-mistakes(review): Enforce single-link ownership for custom check artifacts
kunchenguid
committed
75ff7b7
no-mistakes(review): Preserve private checks, X polling, and lifecycle IDs
kunchenguid
committed
17efd80
no-mistakes(review): Separate task creation and legacy teardown validation
kunchenguid
committed
cdc47e3
no-mistakes(review): Restore safe legacy operations and teardown validation
kunchenguid
committed
a3bf676
no-mistakes(review): Disambiguate migration obligations and preserve legacy retries
kunchenguid
committed
892d672
no-mistakes(review): Preserve fail-closed diagnostics and legacy quarantine evidence
kunchenguid
committed
0733d28
no-mistakes(review): Reconcile legacy migration retries and teardown collisions
kunchenguid
committed
e0c2a4b
no-mistakes(review): Force legacy namespace reconciliation before marker short-circuits
kunchenguid
committed
d98f168
no-mistakes(document): Document private poll artifact safety contracts
kunchenguid
committed
b000166
no-mistakes(lint): Suppress intentional literal-dollar lint finding
kunchenguid
committed
e48561c
fix: migrate historical X poll identity
kunchenguid
committed
e02988f
fix: harden PR check artifacts
kunchenguid
committed
263cb08
no-mistakes(review): Preserve fail-closed diagnostics and legacy quarantine evidence
kunchenguid
committed
6f8f94f
no-mistakes(review): Reconcile legacy migration retries and teardown collisions
kunchenguid
committed
c5c36f7
fix: migrate historical X poll identity
kunchenguid
committed
2a8ee82
no-mistakes(review): Harden X-mode artifact publication against symlink corruption
kunchenguid
committed
4c500e6
no-mistakes(review): Guard X artifact publication
kunchenguid
committed
6518875
no-mistakes(review): Enforce private X artifact reads
kunchenguid
committed
6d795a7
no-mistakes(test): Fix backend compatibility fixture dependencies
kunchenguid
committed
bf15787
no-mistakes(document): Refresh PR-check documentation
kunchenguid
committed
152b775
no-mistakes(lint): Remove unused x-mode test locals
kunchenguid
committed
01c573d
no-mistakes: apply CI fixes
kunchenguid
committed
3a5d9a3