Repository navigation
Fix descriptor reads, dependency locks and hosted maintenance contracts - #292
Merged
Merged
Conversation
erikleblansch
changed the title
This was referenced Oct 20, 2026
erikleblansch
added a commit
that referenced
this pull request
Oct 20, 2026
Record the completed organization maintenance audit, measured cleanup (about 340 GiB net), integrated security/dependency fixes, evidence-backed alert dispositions, retained candidates and local recovery boundaries in a separate maintenance ledger. Link it from the index and keep implementation status concise. Add conservative worktree/cache lifecycle guidance and ignore Python bytecode caches. Raw private/local audit data stays outside Git. Validation: independent documentation review; `git diff --check`, links, ignore scope and protected-file hashes checked. This five-file documentation/ignore delta has identical product source to `fe9d6623ceec64dd1311577310f91ee2200137ed`, whose Quality run 39465279385 and four CodeQL analyses in 39465269032 passed before integration in #292. All 11 local primary repositories passed full Git integrity checks. The final API audit records scanning availability separately from zero findings; all nine source findings are fixed by rescanning. This update does not claim new VM, model or datapath acceptance.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
File readers in the private-task and Cloud SDK fixtures checked a pathname before reopening it, allowing substitution between validation and reading. They now open with no-follow/nonblocking flags, validate the descriptor, perform bounded reads and close it reliably, with focused regression coverage.
This maintenance change updates the reviewed upload-artifact action pin and both exact contract assertions, pins a compatible signed Ubuntu Protobuf compiler/library family, and composes HPKE 0.14.1 plus zeroize 1.9.1 across the workspace and standalone fuzz lockfiles. It retains disabled optional algorithms, exact protected-admission validation and runner restrictions. The HPKE provenance version is updated; license texts are unchanged. It integrates the changes proposed in #220–#224 and supersedes #291.
Validation: independent security/dependency reviews; registry archives, upstream provenance, unchanged licenses and Rust requirements checked; focused descriptor tests and 64 inert protected-admission tests pass. Full Quality run 39465279385 and all four CodeQL analyses in run 39465269032 pass on fe9d662. The merged source tree is identical. Earlier failed runs remain available. Both core source findings are fixed by the default-branch rescan. This establishes source acceptance, not new VM, model or datapath acceptance.