Skip to content

Harden pre-open review and hygiene evidence integrity - #434

Merged
Wibias merged 8 commits into
mainfrom
fix/evidence-integrity-trust-boundaries
Sep 9, 2026
Merged

Harden pre-open review and hygiene evidence integrity#434
Wibias merged 8 commits into
mainfrom
fix/evidence-integrity-trust-boundaries

Conversation

@Wibias

@Wibias Wibias commented Sep 9, 2026

Copy link
Copy Markdown
Owner

Summary

Hardens the two evidence-integrity defects reproduced in the Grok commit + PR trace:

  • candidate-wide bug: clean / security: clean declarations can no longer mint every required pre-open review row; each required lens/surface now needs explicit head-bound evidence with required file coverage;
  • caller-authored hygiene skip text can no longer manufacture an authoritative user opt-out. Skipped publication hygiene fails closed until trusted controller/host user-intent provenance exists.

Regression evidence

RED-first coverage reproduced both trust-boundary gaps before the production changes. The final implementation also reconciles the workflow documentation and keeps create-pr-for-issue.md inside its enforced token budget.

Verification

Exact head: 246ee37682adab9be2063728302aad57aa6cc431

  • CI: success
  • Dependency Review: success
  • Windows trace bins: success
  • CodeQL: success

Scope

Evidence integrity only. Publication reliability, controller state grounding, and trace diagnostics are isolated in #435, #436, and #437.

Ready for review. Do not merge without explicit instruction.

@coderabbitai

coderabbitai Bot commented Sep 9, 2026

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: b2368839-f9b7-4ccd-828d-de4173b145f0


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@Wibias
Wibias marked this pull request as ready for review September 9, 2026 05:59
@Wibias
Wibias merged commit 5c3578b into main Sep 9, 2026
12 checks passed
@Wibias
Wibias deleted the fix/evidence-integrity-trust-boundaries branch September 9, 2026 06:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant