feat(audit): pack-conformance auditor + SARIF 2.1.0 emitter - #51

Merged

Navi Bot (project-navi-bot) merged 10 commits into

mainfrom

feat/nboot-audit

Apr 27, 2026

Commits on Apr 26, 2026

chore(deps): bump navi-sanitize 0.1.0 -> 0.2.1
Nelson Spence (Fieldnote-Echo)
committed
2964538
feat(audit): pack-conformance auditor + SARIF 2.1.0 emitter
Nelson Spence (Fieldnote-Echo)
committed
349cccd
fix(audit): use canonical manifest pack name (not raw CLI arg) for diff
Nelson Spence (Fieldnote-Echo)
committed
0a12aa3
fix(audit): path confinement, distinct exit code, flag-agnostic notice
Nelson Spence (Fieldnote-Echo)
committed
e752727
fix(diff): wrap compute_diffs ValueError; drop dead symlink self-compare
Nelson Spence (Fieldnote-Echo)
committed
360f103
docs(audit): document __version__ fallback + audit threat model
Nelson Spence (Fieldnote-Echo)
committed
e6e9d11
fix(audit): catch ValueError from plan/render in run_audit
Nelson Spence (Fieldnote-Echo)
committed
e0e83d4
fix(audit): address Grippy HIGH + Copilot findings on PR #51
Nelson Spence (Fieldnote-Echo)
committed
ebdb07f
fix(audit): kind enum validation, monkeypatch fixture, TOCTOU docstring
Nelson Spence (Fieldnote-Echo)
committed
787fe1d

Commits on Apr 27, 2026

fix(audit): newline contract on empty findings, defensive Exception catch
Nelson Spence (Fieldnote-Echo)
committed
83d9376