Repository navigation

feat(fullsend): integrate verify-pr and triage-security (TC-6201) - #299

Open

mrizzi wants to merge 202 commits into

mainfrom

verify-pr-fullsend

Commits on Aug 27, 2026
- docs(verify-pr): record TC-5805 environment + resolution findings
  
  mrizzi
  and
  claude
  committed
  682d53a
Commits on Aug 31, 2026
- feat(verify-pr): add standalone root-level fullsend harness
  
  mrizzi
  and
  claude
  committed
  7f2bc8c
- feat(verify-pr): add Vertex AI provider and profile for fullsend harness
  
  mrizzi
  and
  claude
  committed
  118ca19
- feat(verify-pr): add read-only sandbox policy with no tier-1 egress
  
  mrizzi
  and
  claude
  committed
  2cb0b75
- fix(verify-pr): add **/pi to sandbox policy binary allowlist
  
  mrizzi
  and
  claude
  committed
  8282947
Commits on Sep 1, 2026
- feat(verify-pr): split-trust I/O — schemas, prefetch, native validation_loop
  
  mrizzi
  and
  claude
  committed
  4cfc42d
- fix(verify-pr): derive PR diffstat with git apply --stat
  
  mrizzi
  and
  claude
  committed
  859cbaa
- fix(verify-pr): paginate gh api review/comment fetches in prefetch
  
  mrizzi
  and
  claude
  committed
  fd05082
- fix(verify-pr): coerce null Jira description to {} in prefetch transform
  
  mrizzi
  and
  claude
  committed
  d668e20
- fix(verify-pr): end-anchor pre-verify-pr.sh PR-URL regex
  
  mrizzi
  and
  claude
  committed
  8838ba0
- fix(verify-pr): derive COMMIT_SHA from headRefOid in pre-verify-pr.sh
  
  mrizzi
  and
  claude
  committed
  f002c1a
- docs(verify-pr): sync github-bundle schema descriptions to shipped derivations
  
  mrizzi
  and
  claude
  committed
  f3bb34b
Commits on Sep 2, 2026
- feat(verify-pr): add host-side write path with native Jira comments
  
  mrizzi
  and
  claude
  committed
  752c43b
- fix(verify-pr): render post_comment body_adf to markdown for native Jira CLI
  
  mrizzi
  and
  claude
  committed
  1695632
- fix(verify-pr): accept result.json fallback in post-verify-pr.sh
  
  mrizzi
  and
  claude
  committed
  3ca8ba9
- fix(verify-pr): select highest-numbered iteration output numerically
  
  mrizzi
  and
  claude
  committed
  32e8577
- fix(verify-pr): render ADF taskList/taskItem in adf_to_markdown
  
  mrizzi
  and
  claude
  committed
  99da584
- fix(verify-pr): make execute_post_report GitHub comment idempotent on retry
  
  mrizzi
  and
  claude
  committed
  a75e12a
- fix(verify-pr): parse paginated gh api output in _find_report_comment_id
  
  mrizzi
  and
  claude
  committed
  239c0df
- fix(verify-pr): escape markdown-active chars in _render_adf_inline literal text
  
  mrizzi
  and
  claude
  committed
  1213fb1
- fix(verify-pr): render non-text inline ADF nodes in _render_adf_inline
  
  mrizzi
  and
  claude
  committed
  7b01dc5
- fix(verify-pr): constrain post_comment "issue" to Jira-key format in result schema
  
  mrizzi
  and
  claude
  committed
  fcacee5
- docs(verify-pr): document same-commit report retry-update in Step 9
  
  mrizzi
  and
  claude
  committed
  dac5676
- fix(verify-pr): accept {{ref.key}} placeholder in post_comment.issue schema
  
  mrizzi
  and
  claude
  committed
  1bd5f4a
- fix(verify-pr): guard _render_adf_date against out-of-range timestamps
  
  mrizzi
  and
  claude
  committed
  c8c59a3
- fix(verify-pr): fail fast on empty issue_type in create_issue
  
  mrizzi
  and
  claude
  committed
  2302f64
- fix(verify-pr): scope Jira sticky comment marker per purpose
  
  mrizzi
  and
  claude
  committed
  b7c3470
- fix(verify-pr): normalize commit_sha in GitHub report dedup marker
  
  mrizzi
  and
  claude
  committed
  9f5b335
- fix(verify-pr): resolve report_md refs independent of action order
  
  mrizzi
  and
  claude
  committed
  1a25fe3
- fix(verify-pr): render ADF table/panel/blockquote/media blocks
  
  mrizzi
  and
  claude
  committed
  931466a
- fix(verify-pr): escape line-leading markdown block markers in ADF text
  
  mrizzi
  and
  claude
  committed
  b399dd9
- fix(verify-pr): canonicalize commit SHA up to full form for dedup marker
  
  mrizzi
  and
  claude
  committed
  7ce05af
- docs(conventions): document Python test suite and enforce pytest execution
  
  mrizzi
  and
  claude
  committed
  2197cc7
- ci(scripts): run pytest suite on push and PR to main
  
  mrizzi
  and
  claude
  committed
  6fc19c1
- ci(scripts): temporarily run pytest on the feature branch
  
  mrizzi
  and
  claude
  committed
  1aeb30d
- ci(scripts): run pytest on a Python 3.11-3.14 matrix
  
  mrizzi
  and
  claude
  committed
  3283e42
- docs(conventions): correct script test-coverage and dependency claims
  
  mrizzi
  and
  claude
  committed
  b8592cf
Commits on Sep 3, 2026
- feat(verify-pr): re-sync FULLSEND_OUTPUT_DIR sandbox dual-mode onto SKILL.md
  
  mrizzi
  and
  claude
  committed
  2c8defa
- fix(verify-pr): validate prefetched sandbox input against schema
  
  mrizzi
  and
  claude
  committed
  8df7aa2
- fix(verify-pr): fail fast on bad sandbox prefetch instead of credentialed fallback
  
  mrizzi
  and
  claude
  committed
  683b957
- feat(verify-pr): prefetch related-issue metadata for sandbox idempotency
  
  mrizzi
  and
  claude
  committed
  d0ce26e
- fix(verify-pr): post Jira report from report_adf, not report_md
  
  mrizzi
  and
  claude
  committed
  bb028cb
- fix(verify-pr): require idempotency bundle in sandbox prefetch schema
  
  mrizzi
  and
  claude
  committed
  e526abd
- fix(verify-pr): require per-item fields in idempotency.related_issues
  
  mrizzi
  and
  claude
  committed
  e827402
- fix(verify-pr): fail fast on exported-but-empty FULLSEND_OUTPUT_DIR
  
  mrizzi
  and
  claude
  committed
  e696d00
Commits on Sep 4, 2026
- feat(verify-pr): make URL-pinnable base harness + root plugin.json marker
  
  mrizzi
  and
  claude
  committed
  34e6362
Commits on Sep 7, 2026
- feat(verify-pr): post GitHub report + Jira comments via native fullsend CLI
  
  mrizzi
  and
  claude
  committed
  888a178
- chore(verify-pr): pin fullsend base to 888a1781 + re-lock; add .fullsend
  
  mrizzi
  and
  claude
  committed
  8fdaa49
- fix(verify-pr): compute Commit Traceability deterministically on runner
  
  mrizzi
  and
  claude
  committed
  198fbb7
- chore(verify-pr): re-pin .fullsend base to 198fbb7c + re-lock
  
  mrizzi
  and
  claude
  committed
  3ff588f
- fix(verify-pr): anchor own bundled files to ${CLAUDE_PLUGIN_ROOT}
  
  mrizzi
  and
  claude
  committed
  e5c8253
- chore(verify-pr): re-pin .fullsend base URL to e5c82535, re-lock
  
  mrizzi
  and
  claude
  committed
  56a1c9e
- fix(verify-pr): use ${CLAUDE_PLUGIN_ROOT} as a body token, not an env var
  
  mrizzi
  and
  claude
  committed
  b75e964
- chore(verify-pr): re-pin .fullsend base URL to b75e9648, re-lock
  
  mrizzi
  and
  claude
  committed
  efa39e0
Commits on Sep 8, 2026
- fix(verify-pr): make PR-URL extraction format-agnostic
  
  mrizzi
  and
  claude
  committed
  1d59ab5
- chore(verify-pr): re-pin .fullsend base URL to 1d59ab57, re-lock
  
  mrizzi
  and
  claude
  committed
  ff5fb29
- fix(verify-pr): hyphenate Jira post_comment sticky marker
  
  mrizzi
  and
  claude
  committed
  87f7e9b
- chore(verify-pr): re-pin .fullsend base URL to 87f7e9b5, re-lock
  
  mrizzi
  and
  claude
  committed
  f6eb102
- docs(verify-pr): migrate Step 9 report-posting to native fullsend CLI
  
  mrizzi
  and
  claude
  committed
  430a29c
- chore(verify-pr): re-pin .fullsend base URL to 430a29c8, re-lock
  
  mrizzi
  and
  claude
  committed
  7e6d461
- Merge pull request #291 from RHEcosystemAppEng/TC-5813
  mrizzi
  authored
  9c899c8
- docs(verify-pr): rewrite fullsend.md for native v0.37.0 path
  
  mrizzi
  and
  claude
  committed
  1712e2d
- docs(verify-pr): correct pre_script PR-head checkout claim in fullsend.md
  
  mrizzi
  and
  claude
  committed
  4ed6d79
Commits on Sep 9, 2026
- Merge pull request #292 from mrizzi/TC-5814
  mrizzi
  authored
  fa427da
- fix(verify-pr): stop post_script writing __pycache__ into fullsend cache tree
  
  mrizzi
  and
  claude
  committed
  c67f691
- chore(verify-pr): re-pin .fullsend base URL to c67f6911, re-lock
  
  mrizzi
  and
  claude
  committed
  dca34de
- Merge pull request #293 from RHEcosystemAppEng/TC-6112
  mrizzi
  authored
  6371a92
- fix(verify-pr): condense SKILL.md under Skillsaw 16k context budget
  
  mrizzi
  and
  claude
  committed
  6572360
- chore(verify-pr): re-pin .fullsend base URL to 6572360e, re-lock
  
  mrizzi
  and
  claude
  committed
  c0bbad9
- Merge pull request #294 from RHEcosystemAppEng/TC-6137
  mrizzi
  authored
  ffdca91
- docs(verify-pr): record TC-5815 end-to-end acceptance run
  
  mrizzi
  and
  claude
  committed
  438cde0
Commits on Sep 11, 2026
- chore(fullsend): reconcile per-repo setup scaffold for verify-pr
  
  mrizzi
  and
  claude
  committed
  a3cfdcb
Commits on Sep 14, 2026
- feat(verify-pr): CI-gated dispatch workflow + review-role harness trigger
  
  mrizzi
  and
  claude
  committed
  296b671
- chore(verify-pr): re-pin .fullsend base to 296b6711, add child trigger, re-lock
  
  mrizzi
  and
  claude
  committed
  36ea4cb
- fix(verify-pr): grant contents:write so reusable-dispatch passes startup
  
  mrizzi
  and
  claude
  committed
  5c64fd0
- Merge pull request #297 from RHEcosystemAppEng/TC-6188-6189
  mrizzi
  authored
  a66fdab
- feat(verify-pr): derive + gate Jira key from PR URL via JQL in pre_script
  
  mrizzi
  and
  claude
  committed
  e6e35c1
- chore(verify-pr): re-pin .fullsend base to e6e35c10, re-lock
  
  mrizzi
  and
  claude
  committed
  c8ca570
- fix(verify-pr): wire Jira secrets by canonical name, pin fullsend v0.37.0
  
  mrizzi
  and
  claude
  committed
  7b85069
- fix(jira): migrate search to /rest/api/3/search/jql (410 Gone on legacy)
  
  mrizzi
  and
  claude
  committed
  dedb0e2
- chore(verify-pr): re-pin .fullsend base to dedb0e2d, re-lock
  
  mrizzi
  and
  claude
  committed
  9da74ef
- fix(jira): POST search/jql with fields array so custom fields return
  
  mrizzi
  and
  claude
  committed
  69f59da
- chore(verify-pr): re-pin .fullsend base to 69f59da9, re-lock
  
  mrizzi
  and
  claude
  committed
  c813d5e
- diag(verify-pr): log JQL search result on gate failure
  
  mrizzi
  and
  claude
  committed
  069f255
- chore(verify-pr): re-pin .fullsend base to 069f255f, re-lock
  
  mrizzi
  and
  claude
  committed
  f64a48e
Commits on Sep 15, 2026
- ci(verify-pr): bump fullsend CLI pin v0.37.0 -> v0.43.0 for sandbox readiness
  
  mrizzi
  and
  claude
  committed
  b747a44
- fix(verify-pr): pin harness model to claude-opus-4-8 (not floating opus alias)
  
  mrizzi
  and
  claude
  committed
  27856e5
- chore(verify-pr): re-pin .fullsend base to 27856e55, re-lock
  
  mrizzi
  and
  claude
  committed
  bcff605
- fix(verify-pr): agent reads task_id from verify-pr-input.json
  
  mrizzi
  and
  claude
  committed
  fcddf54
- fix(verify-pr): paginate gating JQL search so a match beyond page 1 is not missed
  
  mrizzi
  and
  claude
  committed
  9a2be0e
- fix(verify-pr): re-validate status/label gate on full issue before writing sandbox input
  
  mrizzi
  and
  claude
  committed
  5aaf02c
- chore(verify-pr): re-pin .fullsend base to 5aaf02c2, re-lock
  
  mrizzi
  and
  claude
  committed
  f958516
- fix(verify-pr): request least-privilege GitHub token levels per run-stage
  
  mrizzi
  and
  claude
  committed
  a9099de
- chore(verify-pr): re-pin .fullsend base to a9099de0, re-lock
  
  mrizzi
  and
  claude
  committed
  45104b9
- ci(python-tests): run pytest on PRs targeting verify-pr-fullsend
  
  mrizzi
  and
  claude
  committed
  e90c0ef
- ci(validate-plugins,skillsaw): gate PRs into verify-pr-fullsend
  
  mrizzi
  and
  claude
  committed
  198f0b2
- Merge pull request #298 from RHEcosystemAppEng/TC-6190
  mrizzi
  authored
  6229a91
Commits on Sep 16, 2026
- docs(fullsend): record TC-6192 E2E CI-dispatch acceptance evidence
  
  mrizzi
  and
  claude
  committed
  b752bee
- docs(fullsend): fix TC-6192 AC count (four → five)
  
  mrizzi
  and
  claude
  committed
  b309bae
- docs(fullsend): note vendor Jira-table limitation (fullsend#7345)
  
  mrizzi
  and
  claude
  committed
  60dffa2
- feat(verify-pr): prefetch CI check-run outcomes into sandbox input
  
  mrizzi
  and
  claude
  committed
  14b8be6
- feat(verify-pr): prefetch failed-CI logs into sandbox input for Check 1b
  
  mrizzi
  and
  claude
  committed
  fa3f4b7
- build(verify-pr): re-pin harness base to activate CI check-run prefetch
  
  mrizzi
  and
  claude
  committed
  1185ae2
- docs(fullsend): record TC-6257 CI check-run prefetch E2E acceptance
  
  mrizzi
  and
  claude
  committed
  12c2bde
- Merge pull request #302 from mrizzi/TC-6257
  mrizzi
  authored
  59ed61d
Commits on Sep 17, 2026
- docs(fullsend): document CI install, dispatch design, and upgrade procedures
  
  mrizzi
  and
  claude
  committed
  2b0785a
- ci(verify-pr): enable fork-PR dispatch via pull_request_target + ok-to-test
  
  mrizzi
  and
  claude
  committed
  3f3b621
- fix(verify-pr): self-exclude own workflow check-runs from CI Status
  
  mrizzi
  and
  claude
  committed
  654cf01
- docs(verify-pr): document best-effort CI-Status self-exclusion fallback
  
  mrizzi
  and
  claude
  committed
  da053ba
- ci(verify-pr): re-pin harness to da053ba1 so the fixed pre-script runs
  
  mrizzi
  and
  claude
  committed
  02f271b
- Merge pull request #307 from RHEcosystemAppEng/TC-6343
  mrizzi
  authored
  162be4a
Commits on Sep 18, 2026
- chore(verify-pr): resolve conflicts with main
  mrizzi
  committed
  e6a07ed
- fix(ci): run verify-pr on main and publish eval reports
  mrizzi
  committed
  a084081
Commits on Sep 21, 2026
- feat(triage-security): define Fullsend contract
  mrizzi
  committed
  4575d5e
- fix(triage-security): clarify Vertex credential isolation
  mrizzi
  committed
  0daf37b
- fix(triage-security): require raw output validation
  mrizzi
  committed
  9bf678b
- fix(triage-security): require Landlock enforcement
  mrizzi
  committed
  38d3037
Commits on Sep 22, 2026
- feat(triage-security): prefetch trusted sandbox inputs
  mrizzi
  committed
  4d58ae8
- fix(triage-security): enforce bundle formats
  mrizzi
  committed
  52edbd5
- fix(triage-security): isolate prefetch bundles
  mrizzi
  committed
  7fcb8d2
- fix(triage-security): escape configured JQL values
  mrizzi
  committed
  afae141
- fix(triage-security): harden prefetch collection against routine inputs
  
  mrizzi
  and
  claude
  committed
  903a62a
- fix(triage-security): fail closed when jsonschema[format] is missing
  
  mrizzi
  and
  claude
  committed
  48af38e
- chore(triage-security): suppress subprocess opengrep false positive
  
  mrizzi
  and
  claude
  committed
  eec8c05
- fix(triage-security): place nosemgrep on subprocess.run match line
  
  mrizzi
  and
  claude
  committed
  638468a
- feat(triage-security): execute trusted action plans
  mrizzi
  committed
  7ef5f2f
- fix(triage-security): select transition target status
  mrizzi
  committed
  789f420
- fix(triage-security): anchor post result selection
  mrizzi
  committed
  5815419
- fix(triage-security): match single-ended links
  mrizzi
  committed
  3326ebd
- fix(triage-security): compare retry field objects
  mrizzi
  committed
  cc44e0c
- test(triage-security): derive footer version
  mrizzi
  committed
  99de686
- fix(triage-security): validate trusted result schema
  mrizzi
  committed
  9d6e272
- docs(triage-security): add Fullsend dual-mode design
  mrizzi
  committed
  7a2842c
- feat(triage-security): define Fullsend sandbox contract
  mrizzi
  committed
  d17056c
- feat(triage-security): serialize Fullsend triage actions
  mrizzi
  committed
  ec6b333
- test(triage-security): cover Fullsend dual-mode behavior
  mrizzi
  committed
  15423a6
- fix(triage-security): align Fullsend remediation contract
  mrizzi
  committed
  a7ef245
- fix(triage-security): scope missing-assignee gate
  mrizzi
  committed
  c06a676
- fix(fullsend): register triage-security harness
  mrizzi
  committed
  8fc03af
- fix(triage-security): qualify Fullsend confirmation gate
  mrizzi
  committed
  eaeea6d
- fix(triage-security): accept trusted Fullsend provenance
  mrizzi
  committed
  17bc884
- docs(changelog): record Fullsend triage execution
  mrizzi
  committed
  3f7d6d4
Commits on Sep 23, 2026
- test(triage-security): add Fullsend contract coverage
  mrizzi
  committed
  fcf5b62
- test(triage-security): exercise invalid Fullsend input
  mrizzi
  committed
  860380e
- test(triage-security): restore Fullsend gate coverage
  mrizzi
  committed
  1001527
- test(triage-security): guard format validation
  mrizzi
  committed
  a11b353
- test(triage-security): align authorized label marker
  mrizzi
  committed
  8b67684
- test(triage-security): model remediation digest retry
  mrizzi
  committed
  b2f10dc
- test(triage-security): seed retry snapshot state
  mrizzi
  committed
  420bce4
- test(triage-security): exercise retry snapshot checks
  mrizzi
  committed
  00a3de8
Commits on Sep 24, 2026
- docs(triage-security): document Fullsend operation
  mrizzi
  committed
  52eca8a
- docs(triage-security): correct Fullsend harness path
  mrizzi
  committed
  967ec98
- docs(triage-security): clarify sandbox inputs
  mrizzi
  committed
  0ecaee0
- docs(triage-security): correct matrix constraint source
  mrizzi
  committed
  8815882
Commits on Sep 29, 2026
- fix(triage-security): harden evidence collection portability
  mrizzi
  committed
  e687c9c
- fix(triage-security): anchor matrix ref extraction
  mrizzi
  committed
  7a125c5
- fix(triage-security): tolerate empty matrix branches
  mrizzi
  committed
  35956d0
- fix(triage-security): normalize source commit refs
  mrizzi
  committed
  b2161ff
- fix(triage-security): resolve schema paths from target checkout
  
  mrizzi
  and
  codex
  committed
  32fef09
- fix(triage-security): make Landlock paths best-effort
  mrizzi
  committed
  566ef71
Commits on Sep 30, 2026
- fix(triage-security): bind action plans to trusted issue scope
  mrizzi
  committed
  51bff3d
- fix(triage-security): require declared authorization targets
  mrizzi
  committed
  c70809e
- fix(triage-security): tolerate completed related transitions
  mrizzi
  committed
  59f9ff4
- chore(triage-security): refresh harness pin and lock
  mrizzi
  committed
  255d509
Commits on Oct 1, 2026
Commits on Oct 2, 2026
- test(triage-security): route gate evals through existing trusted agents
  mrizzi
  committed
  6276fb1
Commits on Oct 5, 2026
- test(triage-security): retire ordinary Fullsend gate execution
  mrizzi
  committed
  6f8fae9
- fix(verify-pr): request case 3 eval detection evidence
  mrizzi
  committed
  d83ee90
- test(fullsend): integrate reviewed native gate suite on PR299
  mrizzi
  committed
  b46b2bf
- ci(fullsend): activate native evals after integration merge
  mrizzi
  committed
  7b62662
- fix(ci): install YAML dependency for native eval tests
  mrizzi
  committed
  ed11737
Commits on Oct 6, 2026
- chore(ci): merge main bootstrap fixes into fullsend integration
  mrizzi
  committed
  fd5c06f
- fix(evals): retain safe native failure diagnostics
  mrizzi
  committed
  c7ca849
- chore: merge main after native diagnostics pin update
  mrizzi
  committed
  e3b2eae
- chore: merge main with Opus 4.8 native judge setting
  mrizzi
  committed
  6a251f7
Commits on Oct 7, 2026
- fix(evals): clarify expected native gate stops
  mrizzi
  committed
  91698d4
- chore(integration): sync merged main for native eval validation
  mrizzi
  committed
  43200c8
- chore(integration): sync merged output-path fixes
  mrizzi
  committed
  865560d
- chore(ci): trigger synchronized PR eval validation
  mrizzi
  committed
  89ac2ea
- chore(ci): sync ordinary runner wait fix for integration eval
  mrizzi
  committed
  e19f2e0
Commits on Oct 8, 2026
- fix(evals): scope native inventory grading to skill output
  mrizzi
  committed
  f90d739
- chore(ci): sync trusted judge activation from main
  mrizzi
  committed
  11e0548
- fix(verify-pr): clarify human review grading (TC-6798)
  mrizzi
  committed
  75aac3a
- fix(fullsend): expose safe valid-case tool observations (TC-6799)
  mrizzi
  committed
  5ba86c1
- chore(workflow): sync merged main after TC-6800 (TC-6726)
  mrizzi
  committed
  0d8b61f
- chore(workflow): sync merged execution gate into PR299 (TC-6726)
  mrizzi
  committed
  bda3765
Commits on Oct 9, 2026
- feat(triage-security): prefetch trusted release evidence
  mrizzi
  committed
  23c4b38
- feat(triage-security): execute authorized release actions
  mrizzi
  committed
  0d9ebd0
- feat(triage-security): integrate Fullsend release orchestration
  mrizzi
  committed
  94ae245
- chore(fullsend): merge main after native release activation
  mrizzi
  committed
  96fc266
- fix(fullsend): expose safe grading summary diagnostics
  mrizzi
  committed
  fd7977c
- chore(fullsend): merge main diagnostics into PR299
  mrizzi
  committed
  53b4947

Commits

Commits on Aug 27, 2026

Commits on Aug 31, 2026

Commits on Sep 1, 2026

Commits on Sep 2, 2026

Commits on Sep 3, 2026

Commits on Sep 4, 2026

Commits on Sep 7, 2026

Commits on Sep 8, 2026

Commits on Sep 9, 2026

Commits on Sep 11, 2026

Commits on Sep 14, 2026

Commits on Sep 15, 2026

Commits on Sep 16, 2026

Commits on Sep 17, 2026

Commits on Sep 18, 2026

Commits on Sep 21, 2026

Commits on Sep 22, 2026