fix(sbom): preserve publication tree authority - #2549

Draft

seonghobae wants to merge 61 commits into

fix/full-suite-parser-locks-20260930from

fix/sbom-publication-tree-preservation-20261001

Commits on Sep 30, 2026

fix(opencode): withhold approval on incomplete coverage evidence

seonghobae
and
claude
committed
5e0b6b1
test(ci): expose draft queue retirement gap
seonghobae
committed
8cd0e18
fix(ci): retire queued codeql-pr draft runs
seonghobae
committed
fa7acfb
fix(ci): retire queued sast-semgrep draft runs
seonghobae
committed
a7dff5c
fix(ci): retire queued security-scan draft runs
seonghobae
committed
2ab271f
fix(ci): retire queued python-security draft runs
seonghobae
committed
c091ee4
fix(ci): skip gitleaks entry on draft retirement
seonghobae
committed
c10f1c0
test(ci): require live draft skip without event exemption
seonghobae
committed
3dbb0bc
docs(ci): record draft queue retirement
seonghobae
committed
415c2e7
docs(ci): explain draft queue retirement
seonghobae
committed
f182312
ci: refresh checks on security prerequisite
seonghobae
committed
bf8acdc
merge: carry central security and coverage owner into #2536
seonghobae
committed
737fc6f
fix(ci): fetch metadata evidence ancestry
seonghobae
committed
3bc859c
docs(ci): record metadata ancestry RCA
seonghobae
committed
88143f9
fix(security): refresh shared urllib3 locks
seonghobae
committed
d76ab42
fix(security): pin patched PyJWT recursion release
seonghobae
committed
be64c84
test(opencode): reject incomplete reused coverage evidence
seonghobae
committed
87ffafa
fix(opencode): bind reused approval to coverage decision
seonghobae
committed
0bcded6
test(opencode): refresh reviewed dispatch blob pin
seonghobae
committed
43c78cc
fix(opencode): fail closed on unmeasured approval reuse
seonghobae
committed
7771a2b
test(opencode): cover unmeasured approval CLI rejection
seonghobae
committed
feb88e3
test(opencode): restore full coverage of approval rejection
seonghobae
committed
18c886c
chore(stack): integrate security owner into draft queue retirement
seonghobae
committed
cf8fa36
test(ci): align SAST draft admission contract
seonghobae
committed
76aa575
fix(opencode): honor latest exact-head review decision
seonghobae
committed
ba55414
fix(ci): restore queue-health credential fallback
seonghobae
committed
37ce2e4
fix(security): refresh review runtime locks
seonghobae
committed
6a37e4c
merge: restack draft queue retirement on latest review authority
seonghobae
committed
0dacd79
fix(ci): skip merge scheduler runner on Draft conversion
seonghobae
committed
8ea4750

Commits on Oct 1, 2026

fix(opencode): serialize exact-head dispatch admission
seonghobae
committed
67c6892
merge(ci): integrate current combined owner head
seonghobae
committed
8b4fdca
merge(opencode): synchronize latest control-plane owner
seonghobae
committed
bd05e83
fix(ci): diff agent quality against live base
seonghobae
committed
ba00ac0
merge(ci): integrate shared security owner into live-base repair
seonghobae
committed
617212f
fix(ci): refresh live base before diff gates
seonghobae
committed
af088cc
fix(opencode): recheck receipt after receiver lease
seonghobae
committed
5704440
merge(opencode): synchronize current Maturin owner
seonghobae
committed
86ddef6
fix(scheduler): prove stale-run retirement
seonghobae
committed
1a62357
fix(scheduler): complete active-run inventory
seonghobae
committed
a44bbef
fix(scheduler): retire review-event predecessors
seonghobae
committed
3a7d92e
docs(evidence): bind final exact-suite count
seonghobae
committed
8951c2c
fix(ci): stack live-base diff on canonical owner
seonghobae
committed
b66036e
fix(ci): admit stacked runtime quality owners
seonghobae
committed
0bf08bb
fix(codeql): materialize draft consumer heads
seonghobae
committed
ad79e58
fix(docs): restore complete product gap baseline
seonghobae
committed
1fa31f5
merge: integrate shared security baseline prerequisite
seonghobae
committed
8f6a870
fix(ci): stack live-base quality on queue owner
seonghobae
committed
5deb2d7
test(strix): align queue gate with lease admission
seonghobae
committed
db81de7
merge: integrate #2546 Strix lease-contract gate repair
seonghobae
committed
5206633
merge(ci): reconcile CodeQL Draft event matrix
seonghobae
committed
f6dfbd8
fix(sbom): preserve publication tree authority
seonghobae
committed
59c9bcf
fix: admit exact-head Draft semantic reviews
seonghobae
committed
bd1a3d3
fix(ci): retire stale central dispatch runs
seonghobae
committed
f79c8f2
fix: preserve Draft-to-Ready review admission
seonghobae
committed
6eb1174
fix: restore scheduler coverage guard
seonghobae
committed
8b81426
merge: integrate current OpenCode admission owner
seonghobae
committed
a8bc588
docs(ci): correct stacked required-workflow scope
seonghobae
committed
3d2656b
merge: preserve runtime and SBOM publication owners
seonghobae
committed
0ba66af
fix(sbom): reject reverted owner history
seonghobae
committed
1e2d753
fix(codeql): preserve exact active dispatch
seonghobae
committed
9143d6e
merge: carry CodeQL admission repair into owner union
seonghobae
committed
c8d8e1f