Skip to content

Actions: objectstack-ai/objectstack

Actions

Governed Surface Guard

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
governed-surface-guard.yml
2,500+ workflow runs
2,500+ workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Governed Surface Guard Governed Surface Guard #19630: Merge group checks requested
1m 10s
1m 10s
fix(objectql): work a ctx.api.transaction unit starts and does not await no longer keeps its finished handle Governed Surface Guard #19629: Pull request #22894 ready_for_review by objectstack-fleet Bot
1m 0s claude/issue-22855-scoped-transaction-ambient
claude/issue-22855-scoped-transaction-ambient
1m 0s
feat(plugin-security)!: the boot writes no sys_permission_set row (#15204 stage 6b-2) Governed Surface Guard #19628: Pull request #22900 opened by objectstack-fleet Bot
1m 3s claude/issue-15204-s6b2-declared-permissions
claude/issue-15204-s6b2-declared-permissions
1m 3s
feat(cli)!: delete os meta resync and the example position binders (#15204 stage 6b-2a) Governed Surface Guard #19627: Pull request #22899 opened by objectstack-fleet Bot
1m 7s claude/issue-15204-s6b2a-resync-binders
claude/issue-15204-s6b2a-resync-binders
1m 7s
test(dogfood): fixtures read permission sets from the security catalog (#15204 stage 6b-2, T2) Governed Surface Guard #19626: Pull request #22898 opened by objectstack-fleet Bot
1m 4s claude/issue-15204-s6b2-t2-fixtures
claude/issue-15204-s6b2-t2-fixtures
1m 4s
test(plugin-security): retire the declared-permission seeder suites (#15204 stage 6b-2, T1) Governed Surface Guard #19625: Pull request #22897 opened by objectstack-fleet Bot
1m 6s claude/issue-15204-s6b2-tpr-tests
claude/issue-15204-s6b2-tpr-tests
1m 6s
Governed Surface Guard Governed Surface Guard #19624: Merge group checks requested
1m 10s
1m 10s
fix(rest): hand-built write routes withhold the sandbox's own fault as the data door does (#22885) Governed Surface Guard #19623: Pull request #22896 ready_for_review by objectstack-fleet Bot
49s claude/issue-22885-rest-sandbox-own-fault-withheld
claude/issue-22885-rest-sandbox-own-fault-withheld
49s
fix(security)!: under a wall the security catalog is the platform operator's — tenants are refused catalog writes and may only assign (ADR-0131 D3) Governed Surface Guard #19622: Pull request #22895 synchronize by marchtian
1m 14s claude/issue-15204-wall-catalog-refusal
claude/issue-15204-wall-catalog-refusal
1m 14s
fix(security)!: under a wall the security catalog is the platform operator's — tenants are refused catalog writes and may only assign (ADR-0131 D3) Governed Surface Guard #19621: Pull request #22895 synchronize by marchtian
21s claude/issue-15204-wall-catalog-refusal
claude/issue-15204-wall-catalog-refusal
21s
Governed Surface Guard Governed Surface Guard #19620: Merge group checks requested
54s
54s
feat(trigger-api)!: the inbound hook door refuses the body-only signature form, so only the timestamped form verifies (ruling B on #22805, step 3) Governed Surface Guard #19619: Pull request #22887 ready_for_review by objectstack-fleet Bot
1m 4s claude/issue-22826-refuse-body-only-signature
claude/issue-22826-refuse-body-only-signature
1m 4s
fix(objectql)!: a detail write asks the caller’s read door for its master-detail header — an unreadable header answers as a nonexistent one (#22519) Governed Surface Guard #19618: Pull request #22891 synchronize by os-steve
51s claude/issue-22519-unreadable-header-write
claude/issue-22519-unreadable-header-write
51s
fix(security)!: under a wall the security catalog is the platform operator's — tenants are refused catalog writes and may only assign (ADR-0131 D3) Governed Surface Guard #19617: Pull request #22895 synchronize by marchtian
1m 5s claude/issue-15204-wall-catalog-refusal
claude/issue-15204-wall-catalog-refusal
1m 5s
fix(security)!: under a wall the security catalog is the platform operator's — tenants are refused catalog writes and may only assign (ADR-0131 D3) Governed Surface Guard #19616: Pull request #22895 synchronize by marchtian
55s claude/issue-15204-wall-catalog-refusal
claude/issue-15204-wall-catalog-refusal
55s
fix(rest): hand-built write routes withhold the sandbox's own fault as the data door does (#22885) Governed Surface Guard #19615: Pull request #22896 opened by objectstack-fleet Bot
53s claude/issue-22885-rest-sandbox-own-fault-withheld
claude/issue-22885-rest-sandbox-own-fault-withheld
53s
Governed Surface Guard Governed Surface Guard #19614: Merge group checks requested
1m 3s
1m 3s
fix(runtime)!: callData asks each nested-relation condition's target its exposure before the engine reads it (#22823) Governed Surface Guard #19613: Pull request #22893 ready_for_review by objectstack-fleet Bot
1m 4s claude/issue-22823-calldata-relation-exposure
claude/issue-22823-calldata-relation-exposure
1m 4s
fix(spec): the ui-bulk-action-param-unknown-keys-refused migration text names the promoted field-backed bulk route Governed Surface Guard #19612: Pull request #22888 synchronize by zhuangjianguo
1m 2s claude/issue-22858-bulk-param-route-text
claude/issue-22858-bulk-param-route-text
1m 2s
fix(objectql): work a ctx.api.transaction unit starts and does not await no longer keeps its finished handle Governed Surface Guard #19611: Pull request #22894 synchronize by os-steve
1m 9s claude/issue-22855-scoped-transaction-ambient
claude/issue-22855-scoped-transaction-ambient
1m 9s
fix(objectql): work a ctx.api.transaction unit starts and does not await no longer keeps its finished handle Governed Surface Guard #19610: Pull request #22894 synchronize by os-steve
1m 1s claude/issue-22855-scoped-transaction-ambient
claude/issue-22855-scoped-transaction-ambient
1m 1s
fix(objectql): work a ctx.api.transaction unit starts and does not await no longer keeps its finished handle Governed Surface Guard #19609: Pull request #22894 synchronize by os-steve
1m 10s claude/issue-22855-scoped-transaction-ambient
claude/issue-22855-scoped-transaction-ambient
1m 10s
fix(objectql): work a ctx.api.transaction unit starts and does not await no longer keeps its finished handle Governed Surface Guard #19608: Pull request #22894 opened by objectstack-fleet Bot
1m 10s claude/issue-22855-scoped-transaction-ambient
claude/issue-22855-scoped-transaction-ambient
1m 10s
fix(runtime)!: callData asks each nested-relation condition's target its exposure before the engine reads it (#22823) Governed Surface Guard #19607: Pull request #22893 opened by objectstack-fleet Bot
1m 6s claude/issue-22823-calldata-relation-exposure
claude/issue-22823-calldata-relation-exposure
1m 6s
fix(objectql)!: a detail write asks the caller’s read door for its master-detail header — an unreadable header answers as a nonexistent one (#22519) Governed Surface Guard #19606: Pull request #22891 opened by objectstack-fleet Bot
1m 3s claude/issue-22519-unreadable-header-write
claude/issue-22519-unreadable-header-write
1m 3s