Eric 806b4fba44 [eric] ci: add verify-artifact-manifest that sha256s every file in the packaged dist and either writes a baseline (--write) or diffs against the committed one, catching non-deterministic build steps that survive even fully-pinned dependencies

2026-05-28 01:24:51 -07:00

..

lib

[eric] refactor: trim the verifier and mcp comments to one line each per the updated convention

2026-05-27 19:11:12 -07:00

GATE_AUDIT.md

[eric] docs: write up the gate red-team - what has teeth and the one auth gap we closed

2026-05-27 19:11:12 -07:00

selftest-gate.js

[eric] ci: extend selftest-gate with mutation tests for the new deps-pinned and host-leakage gates so a future weakening of either guard is caught before the build leg runs

2026-05-28 00:55:59 -07:00

smoke-backend.js

[eric] ci: boot the packaged backend in ci + check its health and agent endpoints

2026-05-27 10:19:53 -07:00

test-smoke-backend.js

[eric] ci: boot the packaged backend in ci + check its health and agent endpoints

2026-05-27 10:19:53 -07:00

verify-agent-turn.js

[eric] refactor: trim the verifier and mcp comments to one line each per the updated convention

2026-05-27 19:11:12 -07:00

verify-all.js

[eric] ci: chain deps-pinned and host-leakage first in verify-all so the cheap pure-logic gates fail fast before the build-launch gates spend minutes booting an already-doomed artifact

2026-05-28 00:56:04 -07:00

verify-artifact-manifest.js

[eric] ci: add verify-artifact-manifest that sha256s every file in the packaged dist and either writes a baseline (--write) or diffs against the committed one, catching non-deterministic build steps that survive even fully-pinned dependencies

2026-05-28 01:24:51 -07:00

verify-boot-beacon.js

[eric] test: add a boot-beacon and preflight check and fold it into the run-everything command

2026-05-27 19:11:12 -07:00

verify-deps-pinned.js

[eric] ci: add verify-deps-pinned that fails when backend/requirements.txt has any bare-name, floor (>=), or compat (~=) entry since pip would otherwise resolve those to latest-matching and two builds from the same git sha would ship different bytes

2026-05-28 00:55:50 -07:00

verify-host-leakage.js

[eric] ci: add verify-host-leakage that string-scans the packaged artifact (text files + app.asar) for the build hosts username and home dir, with PEP 610 dist-info metadata auto-allowed since it does not affect runtime

2026-05-28 00:55:45 -07:00

verify-installer.js

[eric] refactor: trim the verifier and mcp comments to one line each per the updated convention

2026-05-27 19:11:12 -07:00

verify-mcp-bundles.js

[eric] ci: add verify-mcp-bundles that spawns each vendored bundle (notion, reddit-buddy, softeria-ms365) under the bundled node and asserts an mcp initialize round-trip so a corrupted esbuild output cant ship green

2026-05-28 01:24:40 -07:00

verify-network.js

[eric] refactor: trim the verifier and mcp comments to one line each per the updated convention

2026-05-27 19:11:12 -07:00

verify-packaged-app.js

[eric] refactor: trim the verifier and mcp comments to one line each per the updated convention

2026-05-27 19:11:12 -07:00

verify-python-health.js

[eric] ci: add verify-python-health that execs the bundled interpreter, asserts python 3.13+, and imports the heaviest backend deps so a missing vcredist dll or half-extracted python-env fails the build red instead of giving users a renderer-up-but-backend-dead boot

2026-05-28 01:24:35 -07:00

verify-resilience.js

[eric] refactor: trim the verifier and mcp comments to one line each per the updated convention

2026-05-27 19:11:12 -07:00

verify-signature.js

[eric] refactor: trim the verifier and mcp comments to one line each per the updated convention

2026-05-27 19:11:12 -07:00

verify-update-feed.js

[eric] ci: add verify-update-feed that parses latest.yml/latest-mac*.yml without applying an update, asserts every advertised file exists on disk and its sha512+size match, so a release with a busted feed cant ship an update that bricks on apply

2026-05-28 01:24:45 -07:00