Repository navigation

feat: stage security merge protection and audit effective policy - #87

Merged

zoeyrose merged 24 commits into

mainfrom

feat/security-merge-protection

Oct 12, 2026

Commits on Oct 11, 2026
- feat: stage security merge protection and audit effective policy
  zoeyrose
  committed
  76d56ba
- fix: verify dependency lifecycle producers semantically
  zoeyrose
  committed
  235e05c
- fix: fence security rollout and converge effective policy
  zoeyrose
  committed
  18cb52d
- fix: preserve merged producer proof and portable policy tests
  zoeyrose
  committed
  295e6ec
- fix: bind canary base proof and security gate ownership
  zoeyrose
  committed
  2a5a1a9
- fix: verify active security policy and stage SHA restoration
  zoeyrose
  committed
  7d4f137
- fix: fail closed on CodeQL reads and run requested canary probes
  zoeyrose
  committed
  14ce873
- docs: state the trusted repository writer boundary
  zoeyrose
  committed
  6115755
- fix: require complete Classic CodeQL partition coverage
  zoeyrose
  committed
  835cc8f
- fix: recheck CodeQL analyses before accepting readiness
  zoeyrose
  committed
  af1bda0
- chore: integrate crate governance from main
  zoeyrose
  committed
  6776e28
- fix: align merged governance fixtures and approval guidance
  zoeyrose
  committed
  9955156
- fix: complete integrated publication test fixtures
  zoeyrose
  committed
  5ec53a6
- fix(audit): normalize implicit GitHub ruleset defaults
  zoeyrose
  committed
  0160d34
- fix(security): persist required gate enforcement intent
  zoeyrose
  committed
  7486867
- fix: qualify security producers and retire exact CI rules
  zoeyrose
  committed
  e794287
- fix: verify PR triggers and layered branch protections
  zoeyrose
  committed
  9f21a63
- fix: verify legacy absence when REST protection is disabled
  zoeyrose
  committed
  0c17b40
- fix(security): fence retirement and audit retained gates
  zoeyrose
  committed
  8870bef
- chore: integrate current governance main
  zoeyrose
  committed
  f8179b5
- fix(security): bind pending gates to the proven default branch
  zoeyrose
  committed
  feb5fe6
- fix(security): reject revoked pending gate proof
  zoeyrose
  committed
  5bf0ce9
- fix(security): verify legacy absence and paginate ruleset inventories
  zoeyrose
  committed
  1e6423c
- fix(security): audit the complete effective branch policy
  zoeyrose
  committed
  bd9ae64

Navigation Menu

Repository navigation

feat: stage security merge protection and audit effective policy - #87

feat: stage security merge protection and audit effective policy#87
zoeyrose merged 24 commits into
mainfrom
feat/security-merge-protection

Commits on Oct 11, 2026

feat: stage security merge protection and audit effective policy

fix: verify dependency lifecycle producers semantically

fix: fence security rollout and converge effective policy

fix: preserve merged producer proof and portable policy tests

fix: bind canary base proof and security gate ownership

fix: verify active security policy and stage SHA restoration

fix: fail closed on CodeQL reads and run requested canary probes

docs: state the trusted repository writer boundary

fix: require complete Classic CodeQL partition coverage

fix: recheck CodeQL analyses before accepting readiness

chore: integrate crate governance from main

fix: align merged governance fixtures and approval guidance

fix: complete integrated publication test fixtures

fix(audit): normalize implicit GitHub ruleset defaults

fix(security): persist required gate enforcement intent

fix: qualify security producers and retire exact CI rules

fix: verify PR triggers and layered branch protections

fix: verify legacy absence when REST protection is disabled

fix(security): fence retirement and audit retained gates

chore: integrate current governance main

fix(security): bind pending gates to the proven default branch

fix(security): reject revoked pending gate proof

fix(security): verify legacy absence and paginate ruleset inventories

fix(security): audit the complete effective branch policy