Harden cccc v2 workflows and packaging - #1

Merged

JTropy merged 61 commits into

mainfrom

agent/cccc-v2-hardening

Aug 11, 2026

Commits on Aug 11, 2026

docs: define cccc v2 architecture

Jtropy
authored and
Jtropy
committed
08173c7
docs: plan cccc v2 implementation

Jtropy
authored and
Jtropy
committed
8b4bcb1
docs: close cccc v2 safety contracts

Jtropy
authored and
Jtropy
committed
65e97b7
test: add canonical skill validation

Jtropy
authored and
Jtropy
committed
c4023ad
fix: reject quoted private frontmatter

Jtropy
authored and
Jtropy
committed
7ff7e02
fix: harden skill validator parsing

Jtropy
authored and
Jtropy
committed
95ffb27
fix: tighten yaml and markdown parsing

Jtropy
authored and
Jtropy
committed
3da9838
fix: reject comment-only required scalars

Jtropy
authored and
Jtropy
committed
63b98a2
feat: add portable timeout runner

Jtropy
authored and
Jtropy
committed
188a6c5
fix: bound POSIX timeout grace polling

Jtropy
authored and
Jtropy
committed
e69acdc
test: skip POSIX timeout unit on Windows

Jtropy
authored and
Jtropy
committed
e89d1d7
fix: harden timeout process lifecycle

Jtropy
authored and
Jtropy
committed
660fba4
test: probe Windows process status safely

Jtropy
authored and
Jtropy
committed
fdffcc5
docs: define timeout cleanup failures

Jtropy
authored and
Jtropy
committed
e5ac080
fix: close timeout runner launch races

Jtropy
authored and
Jtropy
committed
fcd88ac
fix: gate Windows timeout bootstrap launch

Jtropy
authored and
Jtropy
committed
4950d48
fix: distinguish Windows parent access failures

Jtropy
authored and
Jtropy
committed
2a34597
fix: classify Windows bootstrap setup failures

Jtropy
authored and
Jtropy
committed
e343a36
fix: report Windows gate cleanup failure

Jtropy
authored and
Jtropy
committed
edcb17e
docs: define safe Windows CLI resolution

Jtropy
authored and
Jtropy
committed
c0f90e8
fix: verify timeout cleanup invariants

Jtropy
authored and
Jtropy
committed
1a8777c
fix: preserve inherited signal semantics

Jtropy
authored and
Jtropy
committed
a3ee671
fix: manage inherited interrupt masks

Jtropy
authored and
Jtropy
committed
5176a8c
feat: add shared wrapper safety primitives

Jtropy
authored and
Jtropy
committed
f11298a
test: isolate shell harness home

Jtropy
authored and
Jtropy
committed
d9fddda
docs: close nested repository audit gaps

Jtropy
authored and
Jtropy
committed
fe5c581
fix: harden shared safety primitives

Jtropy
authored and
Jtropy
committed
bf176cd
fix: exclude Git metadata from audit policy

Jtropy
authored and
Jtropy
committed
aee1ba8
docs: exclude Git metadata from audit boundary

Jtropy
authored and
Jtropy
committed
237e2f8
fix: reject NTFS Git metadata aliases

Jtropy
authored and
Jtropy
committed
6de947c
docs: cover NTFS Git metadata aliases

Jtropy
authored and
Jtropy
committed
4c6b4f0
docs: close delegate concurrency gaps

Jtropy
authored and
Jtropy
committed
4449165
fix: report trusted timeout outcomes

Jtropy
authored and
Jtropy
committed
24499c7
fix: pin publication parent identity

Jtropy
authored and
Jtropy
committed
b149fee
docs: harden consult isolation contract

Jtropy
authored and
Jtropy
committed
34e057d
feat: harden delegated execution

Jtropy
authored and
Jtropy
committed
cb97105
docs: define authoritative wrapper success

Jtropy
authored and
Jtropy
committed
12f8892
fix: bind delegated execution artifacts

Jtropy
authored and
Jtropy
committed
d977be4
feat: harden read-only peer consultation

Jtropy
authored and
Jtropy
committed
347cbbd
fix: manage consultation publication signals

Jtropy
authored and
Jtropy
committed
a79279c
docs: rewrite cccc workflow instructions

Jtropy
authored and
Jtropy
committed
86c3948
docs: add v2 installation and CI

Jtropy
authored and
Jtropy
committed
2661919
docs: clarify workflow prerequisites

Jtropy
authored and
Jtropy
committed
65c0f6d
fix: emit valid empty Claude MCP config

Jtropy
authored and
Jtropy
committed
9e653be
test: fix Windows CI portability

Jtropy
authored and
Jtropy
committed
035b2fd
test: account for Windows open-file rename

Jtropy
authored and
Jtropy
committed
93ae888
test: probe cross-platform filesystem semantics

Jtropy
authored and
Jtropy
committed
7f4a761
test: compare Windows-resolved shim paths

Jtropy
authored and
Jtropy
committed
0677da9
test: use physical shim paths on Windows

Jtropy
authored and
Jtropy
committed
9665867
test: preserve Windows harness semantics

Jtropy
authored and
Jtropy
committed
0580c4e
test: assert authenticated cleanup precedence

Jtropy
authored and
Jtropy
committed
65098be
fix: preserve MSYS argument boundaries

Jtropy
authored and
Jtropy
committed
30f9bde
test: normalize Windows helper result path

Jtropy
authored and
Jtropy
committed
9bf4b2a
test: rely on native MSYS integration

Jtropy
authored and
Jtropy
committed
d89882b
test: normalize Windows status fixture paths

Jtropy
authored and
Jtropy
committed
c238618
test: normalize Windows DWORD fixture paths

Jtropy
authored and
Jtropy
committed
39a7555
test: adapt consult matrix for Windows

Jtropy
authored and
Jtropy
committed
2403fd2
test: harden Windows consult probes

Jtropy
authored and
Jtropy
committed
c56bbb7
fix: isolate Windows bootstrap Python

Jtropy
authored and
Jtropy
committed
35371c0
test: stabilize Windows authenticated status probes

Jtropy
authored and
Jtropy
committed
36e9bdf
test: handle short reads in status fixtures

Jtropy
authored and
Jtropy
committed
1e6d8c1