| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
test(contracts): pin the GitCode unshallow fail-closed guarantee The mirror pins fetch-depth 0 for full-history secret scanning; the GitCode equivalent is the unshallow step, which currently runs fail- closed (a failed unshallow exits 1) but nothing pins either property. Removing the step or softening the failure would silently degrade the scan to partial history with no test signal - the last parity residual. validateSecurityUnshallow requires git fetch --unshallow plus the exit-1 failure handling; two mutations prove both regressions are caught. 5.4 folds the guarantee into the existing security bullet. Refs #628 Co-Authored-By: Claude Code <noreply@anthropic.com> | 9 天前 | |
docs(readme): adapt front page for AtomGit brand, recommended coordinate and renamed repo 标题与介绍改 AtomGit CLI（原 GitCode CLI）；npm bootstrap 推荐坐标切 atomgit-cli（scoped 等价形式保留，标注旧坐标长期可用与 gitcode-cli 裸名第三方警告）；仓库/下载/issue/brew tap 链接全部指向 rename 后的 atomgit-cli 路径；契约断言同步本地依赖提示新文案。 Commit-by: aflyingto | 1 个月前 | |
fix(review): pin the exact redact value, not the flag substring --redact is a percentage: --redact=0 disables redaction entirely while still satisfying a bare --redact substring check, so the pin could be silently defeated by a one-character edit (security review). Require the full --redact=100 token, add a zero-redact mutation proving that exact bypass is caught, and spell the value out in the spec bullet. Refs #625 Co-Authored-By: Claude Code <noreply@anthropic.com> | 12 天前 | |
fix(release): address review findings for metadata convergence - converge deb/rpm postinstall output URLs (scripts/postinstall.sh) - converge the tap repository paths and -R commands across spec/delivery (build-and-package, release-process, ci-workflows), spec/workflows/ai-local-development-workflow, docs/INTRODUCTION, and docs/AI-GUIDE; prose-only rewrites in entry docs stay in the RFC-0001 PR-5 brand pass - drop the empty content slice from the allowlist test failure message | 1 个月前 | |
fix(review): pin CI triggers and preflight tests in contracts, sync residual docs Review fixes (three reviewers converged on the contract gap): - ci workflow contract: workflowDocument now parses the on block and validateTriggers pins pull_request and push both covering main for BOTH workflow files (new mirror parity test - the GitHub side had zero contract coverage); containment semantics so future release/* branches do not break the pin; three mutation negatives prove the validator catches a removed or retargeted trigger, the exact regression that would recreate the d1714f0 blind spot - release workflow contract: preflight must run go test before the tag is created, pinning the release-time unit test gate - docs: LOOP-GOAL-GUIDE mirror-trigger sentence was stale, ci-workflows toolchain table now lists the push trigger, .loop lesson 9 updated, and the run-list examples gain --branch main --event Push queries for the issue acceptance verification Refs #618 Co-Authored-By: Claude Code <noreply@anthropic.com> | 15 天前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 9 天前 | ||
| 1 个月前 | ||
| 12 天前 | ||
| 1 个月前 | ||
| 15 天前 |