Audit remediation: docs/config truth, CI gates, silent-failure wiring, trust-layer completion - #72

Open

QuintinBotes wants to merge 47 commits into

mainfrom

audit-remediation

Commits on Jul 20, 2026

docs(plan): audit remediation implementation plan
Forge Swarm
committed
5c34e6c
docs(plan): keep FORGE_RERANK_MODEL — live via pydantic FORGE_ prefix
Forge Swarm
committed
c92ad62
fix(config): document real FORGE_MODEL_* env vars and warn on scripted-client fallback

Forge Swarm
and
claude
committed
be54bb3
docs: fix stale feature status, secret var name, package maps, compose tables
Forge Swarm
committed
7faae27
docs(web): align notImplemented docstring with implemented-routes reality
Forge Swarm
committed
a06ad55
docs(release): regenerate changelog and readiness snapshot at current HEAD
Forge Swarm
committed
2ba502f
docs(plan): correct G-ATTEST expectation — production-bar-only gate
Forge Swarm
committed
9aeea07
docs: document trust layer, realtime co-editing, and adaptive orchestration

Forge Swarm
and
claude
committed
128350a
docs(plan): Task 21 — no /ao/self-eval/runs endpoint exists; prefer thin trigger endpoint
Forge Swarm
committed
f36edad
feat(deploy): add nginx reverse-proxy config and reverse-proxy doc
Forge Swarm
committed
a36691d
fix(deploy): nginx body-size and websocket-upgrade parity with Caddy
Forge Swarm
committed
30e9b56
docs(spec): realign FORGE_SPEC with shipped reality
Forge Swarm
committed
7f70154
docs(spec): correct F32/F33 shipping attributions in roadmap
Forge Swarm
committed
6a7c820
ci(web): run vitest suite and tsc typecheck on every PR

Forge Swarm
and
claude
committed
4bf2478
ci(types): bring deploy-core, auth-sdk, marketplace-sdk, observability under mypy

Forge Swarm
and
claude
committed
73676f6
test(infra): guard against test-basename collisions (importlib evaluated, reverted)

Forge Swarm
and
claude
committed
69c2aaf
chore(ci): remove dead ui-kit excludes, orphaned board_v1 dir, wire release draft input
Forge Swarm
committed
f21e949
test(db): gate model/migration schema drift via autogenerate compare

Forge Swarm
and
claude
committed
c7ef161
fix(db): align model with migrations and scope drift-gate exclusions

Forge Swarm
and
claude
committed
1ec5317
test(db): unit-test drift-gate exclusion filter without postgres
Forge Swarm
committed
81068d8
fix(helm): wire real FORGE_MODEL_* env contract, drop dead MinIO knobs

Forge Swarm
and
claude
committed
9266106
fix(helm): render-contract test, blank-key install warning, provider enum

Forge Swarm
and
claude
committed
9815221
fix(deploy): mcp-gateway edge network membership and websocket route parity

Forge Swarm
and
claude
committed
a8fcc5f
fix(deploy): assert ws proxy upstream in tests; document proxied github webhook url
Forge Swarm
committed
9322dc7

Commits on Jul 21, 2026

fix(web): derive same-origin websocket url when NEXT_PUBLIC_WS_URL unset

Forge Swarm
and
claude
committed
1fb5c2e
fix(web): resolve api base url same-origin when NEXT_PUBLIC_API_URL is unset or relative

Forge Swarm
and
claude
committed
a964e95
feat(slack): wire /forge status to live run lookup

Forge Swarm
and
claude
committed
0c0a58f
test(slack): real cross-tenant coverage and threat-model residual for slash surfaces
Forge Swarm
committed
c6f51af
refactor(api): retire legacy in-memory /approval router in favor of DB-backed /approvals

Forge Swarm
and
claude
committed
7ddc2c8
docs(api): state dead-writer status in relocated ApprovalStore docstring

Forge Swarm
and
claude
committed
cd6d3ac
fix(worker): register deployment tasks with celery

Forge Swarm
and
claude
committed
ef07785
fix(web): mark SAML single logout as not yet supported in SSO settings
Forge Swarm
committed
e619b7b
fix(web): separate slo helper from label for clean name/description a11y
Forge Swarm
committed
f0a647b
feat(spec): persist reject and request-changes review decisions end-to-end

Forge Swarm
and
claude
committed
22e8fa1
fix(web): clear stale review error when a sibling review mutation fires
Forge Swarm
committed
ab21ce4
feat(worker): dispatch supervised multi-agent runs through forge_coordinator

Forge Swarm
and
claude
committed
5f7dd0d
docs(config): document MULTI_AGENT_ENABLED gate in .env.example
Forge Swarm
committed
e4f05c5
feat(pm): wire webhook intake to board-write sync task

Forge Swarm
and
claude
committed
1d486ef
fix(pm): real retry semantics for sync task and honest failure docs

Forge Swarm
and
claude
committed
cf7aa14
fix(pm): classify httpx transport faults as transient for sync retries
Forge Swarm
committed
437e86a
feat(attest): expose attested changesets over REST with approvals UI panel

Forge Swarm
and
claude
committed
c74d157
feat(red-team): trigger endpoint and V1 worker gate parity

Forge Swarm
and
claude
committed
7de1f54
fix(red-team): state spine persistence asymmetry honestly; loud mint guards
Forge Swarm
committed
1b54cd9
feat(self-eval): settings panel for suite, baseline, runs, and gate status

Forge Swarm
and
claude
committed
779c382
fix(web): attempt-language for self-eval run-accepted message

Forge Swarm
and
claude
committed
ed07c0c
fix(deploy): pass model-provider and multi-agent env contract into containers

Forge Swarm
and
claude
committed
1697434
docs(release): re-pin readiness snapshot at branch tip

Forge Swarm
and
claude
committed
d218b1b