Repository navigation

promote: foundation and artifact safeguards - #37

Merged

BeforeLights merged 80 commits into

mainfrom

promote/dev-20260803-05

Aug 3, 2026

Merged

promote: foundation and artifact safeguards#37
BeforeLights merged 80 commits into
mainfrom
promote/dev-20260803-05

Commits on Aug 3, 2026
- fix(local): require successful bootstrap readiness
  BeforeLights
  committed
  b3d0000
- docs(foundation): verify live local infrastructure
  BeforeLights
  committed
  5dfa1d2
- build(infra): pin the OpenTofu validation release
  BeforeLights
  committed
  5952e37
- style(infra): normalize OpenTofu sources
  BeforeLights
  committed
  815d180
- build(infra): lock the AWS provider selection
  BeforeLights
  committed
  57e7c79
- feat(infra): add containerized OpenTofu validation
  BeforeLights
  committed
  651425a
- test(infra): exercise credential-free alpha planning
  BeforeLights
  committed
  c18c7b0
- docs(foundation): verify portable AWS validation
  BeforeLights
  committed
  cc87032
- Merge PR #30: close promotion review and foundation gates
  BeforeLights
  authored
  9a54b16
- fix(iae): bind admission to repository artifacts
  BeforeLights
  committed
  68e0e4a
- fix(engine): bound spreadsheet XML reads
  BeforeLights
  committed
  069c0cd
- test(iae): emulate Prisma uniqueness in fixtures
  BeforeLights
  committed
  718b406
- fix(engine): tolerate sparse quality state counts
  BeforeLights
  committed
  5ed2cb4
- fix(sa): reject duplicate blocked reasons
  BeforeLights
  committed
  96553d0
- fix(sa): serialize in-memory audit writes
  BeforeLights
  committed
  6d67783
- fix(sa): require strict UTC audit timestamps
  BeforeLights
  committed
  8b31681
- fix(api): publish bounded collection contracts
  BeforeLights
  committed
  3bfe600
- test(iae): verify intake transition revisions
  BeforeLights
  committed
  fd508f9
- test(iae): harden inbox content leak assertions
  BeforeLights
  committed
  812e0c5
- fix(api): document readiness problems by media type
  BeforeLights
  committed
  42ff542
- fix(iae): disclose expired upload transfers
  BeforeLights
  committed
  f4af924
- fix(domain): validate normalized export text
  BeforeLights
  committed
  e5c4976
- test(domain): verify aggregate governance exports
  BeforeLights
  committed
  533e7b7
- test(sa): assert value-free finding payloads
  BeforeLights
  committed
  eec8df5
- fix(domain): classify premature upload expiry
  BeforeLights
  committed
  6173abf
- fix(sa): preserve finding validation errors
  BeforeLights
  committed
  3f769e2
- test(domain): guard completed upload results
  BeforeLights
  committed
  adb45ef
- fix(domain): classify premature unlock expiry
  BeforeLights
  committed
  d477368
- fix(dsm): enforce dataset profile row budgets
  BeforeLights
  committed
  afb3fdc
- fix(sa): support complete XLSX row geometry
  BeforeLights
  committed
  3311f2a
- refactor(iae): simplify inbox revision context
  BeforeLights
  committed
  4a4c781
- fix(iae): harden export manifest persistence
  BeforeLights
  committed
  34495dd
- fix(api): map unavailable tenant context safely
  BeforeLights
  committed
  5c0b1d4
- fix(iae): require integer admission byte sizes
  BeforeLights
  committed
  b6603eb
- fix(iae): map export rejections to HTTP problems
  BeforeLights
  committed
  c59b5b0
- fix(iae): require strict UTC governance dates
  BeforeLights
  committed
  ea3c4ed
- fix(dsm): translate immutable create races
  BeforeLights
  committed
  bc9e266
- fix(dsm): constrain quality values to scalars
  BeforeLights
  committed
  e634d65
- docs(review): record PR 31 dispositions
  BeforeLights
  committed
  83fbeec
- Merge PR #32: resolve promotion review findings
  BeforeLights
  authored
  e0569f6
- fix(iae): forward artifact scan state
  BeforeLights
  committed
  843a85d
- fix(dso): require sequential capability revisions
  BeforeLights
  committed
  5a9cff1
- fix(iae): block quarantined evidence handles
  BeforeLights
  committed
  0fc77d6
- fix(iae): normalize evidence sheet lookup
  BeforeLights
  committed
  2886d00
- fix(iae): authorize persisted placement scope
  BeforeLights
  committed
  4c8bd91
- fix(iam): align in-memory MFA revisions
  BeforeLights
  committed
  677d981
- test(iae): enforce lineage uniqueness in fixture
  BeforeLights
  committed
  924c48b
- test(iae): bind lineage index assertion
  BeforeLights
  committed
  55d0c6c
- fix(sa): group formula gaps by family
  BeforeLights
  committed
  151524e
- test(iam): prove bootstrap transaction client
  BeforeLights
  committed
  454043b
- test(api): prove foundation option forwarding
  BeforeLights
  committed
  71acbc9
- test(iae): fail closed on retention authorization
  BeforeLights
  committed
  32b6ace
- fix(iae): derive deletion requester from session
  BeforeLights
  committed
  9702160
- docs(review): record PR 33 dispositions
  BeforeLights
  committed
  2fa1e6e
- style(review): format promotion fixes
  BeforeLights
  committed
  cfdb786
- Merge review fixes for promotion PR #33
  BeforeLights
  committed
  ea7fdab
- fix(android): fail closed on hostile telemetry maps
  BeforeLights
  committed
  8eccfa4
- promote: merge dev slice 5 into main
  BeforeLights
  committed
  18f4a36
- fix(infra): tighten OpenTofu semantic version checks
  BeforeLights
  committed
  2ff9018
- test(infra): cover strict OpenTofu version pins
  BeforeLights
  committed
  1ff27ff
- fix(infra): make OpenTofu validation mounts read-only
  BeforeLights
  committed
  7be00e3
- test(infra): assert OpenTofu safety wording and mounts
  BeforeLights
  committed
  238f619
- fix(api): align OpenAPI timestamp and integer schemas
  BeforeLights
  committed
  1790f0d
- chore(api): regenerate OpenAPI schema
  BeforeLights
  committed
  8622586
- test(api): lock OpenAPI validator parity
  BeforeLights
  committed
  4aecc99
- fix(iae): map duplicate lineage conflicts
  BeforeLights
  committed
  dff8f01
- test(iae): cover repository lineage conflict mapping
  BeforeLights
  committed
  2ded1f7
- docs(ops): record PR 37 review disposition
  BeforeLights
  committed
  c3c34f7
- fix(test): accept wrapped OpenTofu help text
  BeforeLights
  committed
  2201a3f
- style: format review fixes
  BeforeLights
  committed
  c2d0bf0
- fix: reconcile CodeRabbit PR 37 findings
  BeforeLights
  committed
  01bf508
- fix(dsm): reject null quality values
  BeforeLights
  committed
  3d27012
- fix(dsm): guard tenant visibility before persisted decoding
  BeforeLights
  committed
  ffcaffb
- test(android): assert telemetry cause suppression
  BeforeLights
  committed
  6324072
- refactor(api): centralize Prisma unique constraint checks
  BeforeLights
  committed
  7255556
- fix(iae): revalidate upload transfers after issuance
  BeforeLights
  committed
  7da3e77
- docs(ops): record PR 37 follow-up dispositions
  BeforeLights
  committed
  0d0c57f
- fix: reconcile CodeRabbit PR 37 follow-ups
  BeforeLights
  committed
  3c22c78
- fix(api): close final promotion review findings
  BeforeLights
  committed
  41af8fd
- fix: reconcile final CodeRabbit findings
  BeforeLights
  committed
  9f5cc05

Commits

Commits on Aug 3, 2026