feat(operations): run default-branch Maintainer App preflight - #62

Merged

seonghobae merged 44 commits into

mainfrom

feat/maintainer-app-preactivation-evidence

Aug 4, 2026

Commits on Aug 4, 2026

feat(operations): add default-branch Maintainer App preflight
seonghobae
committed
e91c0ea
test(operations): retain dry-run execution failures
seonghobae
committed
0f7fe63
fix(operations): retain dry-run execution failures
seonghobae
committed
f1a7d7f
test(operations): require normalized dry-run evidence
seonghobae
committed
63b9c3a
fix(operations): normalize bounded dry-run evidence
seonghobae
committed
6a35034
docs(operations): document dry-run evidence normalization
seonghobae
committed
53c9fe6
test(operations): define bounded evidence normalization
seonghobae
committed
a218911
feat(operations): normalize bounded dry-run evidence
seonghobae
committed
feac2f1
refactor(test): verify reusable evidence normalizer
seonghobae
committed
5265b51
refactor(operations): reuse tested evidence normalizer
seonghobae
committed
98dd215
fix(operations): atomically replace unsafe evidence
seonghobae
committed
e96333f
test(operations): reject noncanonical and symlinked evidence writes
seonghobae
committed
5e38505
fix(operations): reject ambiguous timestamps and temp symlinks
seonghobae
committed
0896594
docs(operations): document normalized readiness evidence
seonghobae
committed
c522e04
test(ci): require 100 percent production coverage execution
seonghobae
committed
b57c38e
docs(changelog): record normalized preflight evidence
seonghobae
committed
25e5c4f
ci(coverage): execute 100 percent production coverage gate
seonghobae
committed
df1e375
ci(coverage): include evidence normalizer in production gate
seonghobae
committed
b6ab625
test(ci): require exact-PR workflow concurrency
seonghobae
committed
6a98fed
test(ci): require immutable pull-request workflow sources
seonghobae
committed
29f9ee4
ci(workflows): cancel stale exact-PR verification runs
seonghobae
committed
10d10a7
ci(workflows): cancel stale exact-PR reviewer runs
seonghobae
committed
52214a1
test(operations): cover the complete evidence trust boundary
seonghobae
committed
301cc7e
fix(operations): close evidence descriptor race and coverage gaps
seonghobae
committed
e6bb86d
docs(operations): document exact evidence and CI trust boundaries
seonghobae
committed
382310d
test(operations): require runner-isolated preflight evidence
seonghobae
committed
a3b936a
fix(operations): isolate preflight evidence from checkout
seonghobae
committed
3ebccfc
fix(test): escape runner context literals
seonghobae
committed
6b789b3
docs(operations): document runner-isolated evidence paths
seonghobae
committed
14e60ee
test(operations): reject duplicate JSON evidence keys
seonghobae
committed
fb69035
fix(operations): reject ambiguous duplicate JSON keys
seonghobae
committed
609ddc0
docs(operations): document duplicate-key evidence rejection
seonghobae
committed
1ef7d76
docs(changelog): record bounded JSON ambiguity rejection
seonghobae
committed
5351cb8
test(security): reject malformed UTF-8 evidence
seonghobae
committed
fdd5bec
test(operations): reject malformed UTF-8 evidence
seonghobae
committed
8d5f418
fix(security): fail closed on malformed UTF-8 evidence
seonghobae
committed
0488187
docs(doctoring): record fatal UTF-8 evidence boundary
seonghobae
committed
1e117cd
test(security): consolidate UTF-8 evidence regression
seonghobae
committed
8ad7410
test(security): preserve allowlisted international evidence
seonghobae
committed
157d51c
test(performance): forbid quadratic primitive suffix copies
seonghobae
committed
622e7ab
test(operations): require stable failure-report identity
seonghobae
committed
13adf12
fix(performance): scan JSON primitives without suffix copies
seonghobae
committed
f590c03
fix(workflows): preserve bounded failure reason evidence
seonghobae
committed
39fd987
test(coverage): exercise URL parser fail-closed branches
seonghobae
committed
6decdc9