Turn persisted findings into provenance-aware remediation work - #209

Merged

zgbrenner merged 49 commits into

mainfrom

feat/finding-remediation-loop

Aug 4, 2026

Commits on Aug 4, 2026

docs: record review-to-action open-source research
zgbrenner
committed
edfc460
docs: specify finding remediation workflow
zgbrenner
committed
0e0fd64
docs: plan finding remediation implementation
zgbrenner
committed
3479e55
feat: add deterministic remediation selection service
zgbrenner
committed
dd58a66
test: cover remediation selection policy
zgbrenner
committed
067cf39
feat: add finding remediation task links
zgbrenner
committed
f942e5a
feat: model finding remediation task links
zgbrenner
committed
faf019a
test: validate remediation migration shape
zgbrenner
committed
f999f66
test: guard remediation link model boundaries
zgbrenner
committed
585068e
test: require RLS for remediation links
zgbrenner
committed
2da3429
security: cover remediation links with RLS
zgbrenner
committed
30003da
test: protect remediation task payloads
zgbrenner
committed
ff2a6a6
feat: add safe remediation task payload helpers
zgbrenner
committed
e1309a6
test: define remediation API contracts
zgbrenner
committed
447f620
feat: add remediation API schemas
zgbrenner
committed
315377b
test: cover finding remediation HTTP workflow
zgbrenner
committed
7adba80
test: define remediation persistence contract
zgbrenner
committed
3cb9f10
test: remove duplicate remediation persistence contract
zgbrenner
committed
ac7e348
feat: add finding remediation endpoints
zgbrenner
committed
a6bab22
security: protect remediation Inbox provenance
zgbrenner
committed
4b4d7bc
feat: register finding remediation API
zgbrenner
committed
8868ffd
test: block stale remediation work
zgbrenner
committed
6738d3a
feat: reject remediation for superseded findings
zgbrenner
committed
1bac557
feat: enforce remediation finding actionability
zgbrenner
committed
f86fe10
test: define finding remediation card behavior
zgbrenner
committed
f49a74b
test: define remediation API client and demo behavior
zgbrenner
committed
c355609
feat: add typed remediation API contracts
zgbrenner
committed
9acdd76
feat: add live and demo remediation API client
zgbrenner
committed
12900d2
feat: add provenance-aware finding remediation card
zgbrenner
committed
8212105
feat: connect persisted findings to remediation workflow
zgbrenner
committed
30e6c7a
test: assert one review source and remediation integration
zgbrenner
committed
ff27221
test: require shared demo Inbox remediation state
zgbrenner
committed
ae25bae
feat: share remediation tasks with the demo Inbox
zgbrenner
committed
8e1ad1d
docs: align remediation design with durable link model
zgbrenner
committed
a69a3f4
test: cover stale finding remediation guards
zgbrenner
committed
d1cfa5b
docs: reconcile remediation plan with implementation
zgbrenner
committed
474c581
feat: harden remediation card lifecycle and stale-run UX
zgbrenner
committed
349d4a1
chore: set backend prerelease version
zgbrenner
committed
ff8863f
chore: expose prerelease API version
zgbrenner
committed
d212be5
chore: set frontend prerelease version
zgbrenner
committed
c5fca2d
docs: add changelog for alpha release
zgbrenner
committed
c43bf98
test: protect superseded finding lifecycle
zgbrenner
committed
3bb4a9e
docs: add v0.1.0-alpha.1 release notes
zgbrenner
committed
2bab7d9
chore: add complete local verification script
zgbrenner
committed
3080343
chore: add Windows local verification script
zgbrenner
committed
8f5f13f
fix: keep superseded findings read-only
zgbrenner
committed
e934024
chore: move verification off hosted GitHub Actions
zgbrenner
committed
f03a03a
docs: align research notes with durable remediation links
zgbrenner
committed
857161d
docs: document remediation workflow and fix quickstart
zgbrenner
committed
3f98ba3