fix(strix): install hashed locks without pip re-resolution - #969

Closed

seonghobae wants to merge 14 commits into

mainfrom

fix/strix-no-deps-pip-audit-hashed-lock

Commits on Aug 13, 2026

fix(strix): install hashed locks without pip re-resolution
seonghobae
committed
ad60bbc
fix(strix): require hash evidence before disable-pip
seonghobae
committed
5e8ac95
fix(strix): require --hash= pins before disable-pip
seonghobae
committed
89d0b64
fix(strix): require every package line hashed before disable-pip
seonghobae
committed
1cf6117
fix(strix): reject dotted requirement includes from materialize
seonghobae
committed
3caf51f

Commits on Aug 14, 2026

chore(strix): drop overlapping materializer delta
seonghobae
committed
77b380a

Commits on Aug 16, 2026

test(pip-audit): specify fail-closed lock discovery
seonghobae
committed
8009025
fix(pip-audit): fail closed on ambiguous lock inputs
seonghobae
committed
39102fe
chore(strix): restore bounded audit scope
seonghobae
committed
dd58efb
merge(main): resolve DIRTY #969 and cover pip-audit fail-closed paths
github-actions[bot]
committed
36beace
test(pip-audit): cover symlink sibling and filename-only locks

cursoragent
and
seonghobae
committed
a2f3a7e

Commits on Aug 17, 2026

fix(pip-audit): keep index-url locks on disable-pip

cursoragent
and
seonghobae
committed
0c8f062
test(pip-audit): cover non-regular pylock continue branch

cursoragent
and
seonghobae
committed
6c2001a

Commits on Aug 18, 2026

merge(main): reconcile Strix hashed-lock prerequisite
seonghobae
committed
200899e