haelyra bab38ae91b fix(security): close installer filesystem races ...

Use no-follow file descriptors for legacy Codex snapshots, verification, restoration, and marker cleanup. Quarantine candidate removals and verify inode identity before deletion.

Carry the lifecycle runner as a verified artifact so privileged release workflows never dynamically check out and execute an output-selected revision.

2026-08-13 16:59:06 -04:00

..

ISSUE_TEMPLATE

feat: add retention feedback loop and honest support matrix (#2681)

2026-08-04 21:42:25 -04:00

prompts

ci: harden workflows and sponsor code review config

2026-06-09 21:20:17 -04:00

workflows

fix(security): close installer filesystem races

2026-08-13 16:59:06 -04:00

CODEOWNERS

feat: extend harness audit integration scoring (#1990)

2026-05-19 06:20:54 -04:00

copilot-instructions.md

ci: harden workflows and sponsor code review config

2026-06-09 21:20:17 -04:00

dependabot.yml

security: harden advisory intake and dependency coverage

2026-06-09 20:46:14 -04:00

FUNDING.yml

chore: clean up FUNDING.yml format

2026-02-28 10:09:51 -08:00

PULL_REQUEST_TEMPLATE.md

feat: Plan Canvas, a browser review canvas for plans (#2467)

2026-07-08 17:12:48 -04:00

release.yml

feat: deliver v1.8.0 harness reliability and parity updates

2026-03-04 14:48:06 -08:00