haelyra bab38ae91b fix(security): close installer filesystem races ...

Use no-follow file descriptors for legacy Codex snapshots, verification, restoration, and marker cleanup. Quarantine candidate removals and verify inode identity before deletion.

Carry the lifecycle runner as a verified artifact so privileged release workflows never dynamically check out and execute an output-selected revision.

2026-08-13 16:59:06 -04:00

..

agent-instruction-safety.test.js

test: report instruction guardrails independently

2026-04-30 09:39:54 -04:00

agent-yaml-surface.test.js

fix: remove canonical Anthropic skill duplicates

2026-04-30 00:21:13 -04:00

catalog.test.js

fix: address Vue review PR feedback

2026-06-12 19:44:39 +08:00

code-reviewer-false-positive-guard.test.js

feat: salvage code-reviewer false-positive guardrails (#1817)

2026-05-12 15:01:46 -04:00

codex-skill-surface.test.js

feat: add machine learning engineering workflow

2026-05-11 17:55:50 -04:00

command-registry.test.js

feat: add command registry and coverage checks (#1906)

2026-05-14 22:02:36 -04:00

dynamic-workflow-team-surface.test.js

feat: add dynamic workflow team orchestration surface

2026-06-04 21:45:13 +08:00

ito-baskets-skill.test.js

feat(skills): consolidate Itô market skills into ito-baskets; align ito-training fail-closed contract (#2770)

2026-08-12 15:52:26 -04:00

ito-compute-skill.test.js

fix(ito-compute): complete device auth lifecycle (#2706)

2026-08-07 14:53:13 -04:00

ito-inference-skill.test.js

fix(ci): restore green main for the Itô skill test suite (#2720)

2026-08-07 19:47:55 -04:00

ito-training-skill.test.js

feat(skills): consolidate Itô market skills into ito-baskets; align ito-training fail-closed contract (#2770)

2026-08-12 15:52:26 -04:00

mle-workflow-coverage.test.js

feat: add machine learning engineering workflow

2026-05-11 17:55:50 -04:00

no-personal-paths.test.js

fix: harden CI validators

2026-05-11 03:08:43 -04:00

packed-artifact-lifecycle.js

fix(install): harden ECC installer lifecycle

2026-08-13 16:42:51 -04:00

packed-artifact-lifecycle.test.js

fix(install): harden ECC installer lifecycle

2026-08-13 16:42:51 -04:00

release-announce-workflow.test.js

fix: deliver announcements through a scoped Discord webhook (#2737)

2026-08-09 16:41:27 -04:00

release-packed-artifact-workflow.test.js

fix(security): close installer filesystem races

2026-08-13 16:59:06 -04:00

scan-supply-chain-iocs.test.js

fix: prevent IOC scanner false positives on hook filenames and scan .cursor configs (#2245)

2026-06-15 13:48:50 -04:00

secret-curl-flags.test.js

fix(skills): keep curl credentials out of argv (#2175)

2026-06-07 13:25:45 +08:00

supply-chain-advisory-sources.test.js

Cover advisory source renderer branches

2026-05-15 23:09:54 -04:00

supply-chain-watch-workflow.test.js

fix: ship new Itô skills through install manifests (#2704)

2026-08-07 14:14:21 -04:00

unified-memory-surface.test.js

feat: add cross-harness memory vault (#2581)

2026-07-26 02:46:59 -07:00

validate-agents-tools.test.js

fix: use scalar Claude agent tools (#2583)

2026-07-26 03:20:15 -07:00

validate-workflow-security.test.js

security: scope release oidc publishing

2026-05-18 13:41:10 -04:00

validators.test.js

feat: add retention feedback loop and honest support matrix (#2681)

2026-08-04 21:42:25 -04:00