promote: foundation and artifact safeguards - #37

Merged

BeforeLights merged 80 commits into

mainfrom

promote/dev-20260803-05

Aug 3, 2026

Commits on Aug 3, 2026

fix(local): require successful bootstrap readiness
BeforeLights
committed
b3d0000
docs(foundation): verify live local infrastructure
BeforeLights
committed
5dfa1d2
build(infra): pin the OpenTofu validation release
BeforeLights
committed
5952e37
style(infra): normalize OpenTofu sources
BeforeLights
committed
815d180
build(infra): lock the AWS provider selection
BeforeLights
committed
57e7c79
feat(infra): add containerized OpenTofu validation
BeforeLights
committed
651425a
test(infra): exercise credential-free alpha planning
BeforeLights
committed
c18c7b0
docs(foundation): verify portable AWS validation
BeforeLights
committed
cc87032
Merge PR #30: close promotion review and foundation gates
BeforeLights
authored
9a54b16
fix(iae): bind admission to repository artifacts
BeforeLights
committed
68e0e4a
fix(engine): bound spreadsheet XML reads
BeforeLights
committed
069c0cd
test(iae): emulate Prisma uniqueness in fixtures
BeforeLights
committed
718b406
fix(engine): tolerate sparse quality state counts
BeforeLights
committed
5ed2cb4
fix(sa): reject duplicate blocked reasons
BeforeLights
committed
96553d0
fix(sa): serialize in-memory audit writes
BeforeLights
committed
6d67783
fix(sa): require strict UTC audit timestamps
BeforeLights
committed
8b31681
fix(api): publish bounded collection contracts
BeforeLights
committed
3bfe600
test(iae): verify intake transition revisions
BeforeLights
committed
fd508f9
test(iae): harden inbox content leak assertions
BeforeLights
committed
812e0c5
fix(api): document readiness problems by media type
BeforeLights
committed
42ff542
fix(iae): disclose expired upload transfers
BeforeLights
committed
f4af924
fix(domain): validate normalized export text
BeforeLights
committed
e5c4976
test(domain): verify aggregate governance exports
BeforeLights
committed
533e7b7
test(sa): assert value-free finding payloads
BeforeLights
committed
eec8df5
fix(domain): classify premature upload expiry
BeforeLights
committed
6173abf
fix(sa): preserve finding validation errors
BeforeLights
committed
3f769e2
test(domain): guard completed upload results
BeforeLights
committed
adb45ef
fix(domain): classify premature unlock expiry
BeforeLights
committed
d477368
fix(dsm): enforce dataset profile row budgets
BeforeLights
committed
afb3fdc
fix(sa): support complete XLSX row geometry
BeforeLights
committed
3311f2a
refactor(iae): simplify inbox revision context
BeforeLights
committed
4a4c781
fix(iae): harden export manifest persistence
BeforeLights
committed
34495dd
fix(api): map unavailable tenant context safely
BeforeLights
committed
5c0b1d4
fix(iae): require integer admission byte sizes
BeforeLights
committed
b6603eb
fix(iae): map export rejections to HTTP problems
BeforeLights
committed
c59b5b0
fix(iae): require strict UTC governance dates
BeforeLights
committed
ea3c4ed
fix(dsm): translate immutable create races
BeforeLights
committed
bc9e266
fix(dsm): constrain quality values to scalars
BeforeLights
committed
e634d65
docs(review): record PR 31 dispositions
BeforeLights
committed
83fbeec
Merge PR #32: resolve promotion review findings
BeforeLights
authored
e0569f6
fix(iae): forward artifact scan state
BeforeLights
committed
843a85d
fix(dso): require sequential capability revisions
BeforeLights
committed
5a9cff1
fix(iae): block quarantined evidence handles
BeforeLights
committed
0fc77d6
fix(iae): normalize evidence sheet lookup
BeforeLights
committed
2886d00
fix(iae): authorize persisted placement scope
BeforeLights
committed
4c8bd91
fix(iam): align in-memory MFA revisions
BeforeLights
committed
677d981
test(iae): enforce lineage uniqueness in fixture
BeforeLights
committed
924c48b
test(iae): bind lineage index assertion
BeforeLights
committed
55d0c6c
fix(sa): group formula gaps by family
BeforeLights
committed
151524e
test(iam): prove bootstrap transaction client
BeforeLights
committed
454043b
test(api): prove foundation option forwarding
BeforeLights
committed
71acbc9
test(iae): fail closed on retention authorization
BeforeLights
committed
32b6ace
fix(iae): derive deletion requester from session
BeforeLights
committed
9702160
docs(review): record PR 33 dispositions
BeforeLights
committed
2fa1e6e
style(review): format promotion fixes
BeforeLights
committed
cfdb786
Merge review fixes for promotion PR #33
BeforeLights
committed
ea7fdab
fix(android): fail closed on hostile telemetry maps
BeforeLights
committed
8eccfa4
promote: merge dev slice 5 into main
BeforeLights
committed
18f4a36
fix(infra): tighten OpenTofu semantic version checks
BeforeLights
committed
2ff9018
test(infra): cover strict OpenTofu version pins
BeforeLights
committed
1ff27ff
fix(infra): make OpenTofu validation mounts read-only
BeforeLights
committed
7be00e3
test(infra): assert OpenTofu safety wording and mounts
BeforeLights
committed
238f619
fix(api): align OpenAPI timestamp and integer schemas
BeforeLights
committed
1790f0d
chore(api): regenerate OpenAPI schema
BeforeLights
committed
8622586
test(api): lock OpenAPI validator parity
BeforeLights
committed
4aecc99
fix(iae): map duplicate lineage conflicts
BeforeLights
committed
dff8f01
test(iae): cover repository lineage conflict mapping
BeforeLights
committed
2ded1f7
docs(ops): record PR 37 review disposition
BeforeLights
committed
c3c34f7
fix(test): accept wrapped OpenTofu help text
BeforeLights
committed
2201a3f
style: format review fixes
BeforeLights
committed
c2d0bf0
fix: reconcile CodeRabbit PR 37 findings
BeforeLights
committed
01bf508
fix(dsm): reject null quality values
BeforeLights
committed
3d27012
fix(dsm): guard tenant visibility before persisted decoding
BeforeLights
committed
ffcaffb
test(android): assert telemetry cause suppression
BeforeLights
committed
6324072
refactor(api): centralize Prisma unique constraint checks
BeforeLights
committed
7255556
fix(iae): revalidate upload transfers after issuance
BeforeLights
committed
7da3e77
docs(ops): record PR 37 follow-up dispositions
BeforeLights
committed
0d0c57f
fix: reconcile CodeRabbit PR 37 follow-ups
BeforeLights
committed
3c22c78
fix(api): close final promotion review findings
BeforeLights
committed
41af8fd
fix: reconcile final CodeRabbit findings
BeforeLights
committed
9f5cc05