Full-project-review remediation: Waves 1–4 (H2→N1, 78 commits)#63

Merged

cemililik merged 106 commits into

mainfrom

Jun 15, 2026

Commits on Jun 14, 2026

Commits on Jun 15, 2026

fix(compliance): deterministic set hashing + cross-platform manifest paths + atomic bundle promotion (PR#63-review)

cemililik
and
claude
committed
fix(config): make TIES/DARE merge knobs + synthetic sanity bound config-driven (PR#63-review)

cemililik
and
claude
committed
fix(grpo): last-marker answer extraction + non-consuming gold probe (PR#63-review)

cemililik
and
claude
committed
fix(_http): set server_hostname for IP-pinned non-standard-port HTTPS SNI (PR#63-review)

cemililik
and
claude
committed
fix(reverse-pii): don't echo re.error text into JSON error envelope (PR#63-review)

cemililik
and
claude
committed
fix(synthetic): bare-string JSON seed line uses parsed value not quoted line (PR#63-review)

cemililik
and
claude
committed
fix(docs): normalise exit-code + top-level-block contradictions (PR#63-review)

cemililik
and
claude
committed
fix(docs): markdown-lint + mirror-link minors from doc sweep (PR#63-review)

cemililik
and
claude
committed
fix(ci): drop obsolete test_cost_estimation filename guard from publish (PR#63-review)

cemililik
and
claude
committed
fix(tools): notebook-pin guard imports on Python 3.10 via tomli backport (PR#63-review)

cemililik
and
claude
committed
fix(tests): tighten brittle asserts + drop silent import fallback (PR#63-review)

cemililik
and
claude
committed
fix(tests): probe top-level rich, not submodule, in chat availability check

cemililik
and
claude
committed
fix(tests): stub safe_post chokepoint, not requests.post, in judge narrowing

cemililik
and
claude
committed
fix(config): exclude_unset on pipeline stage-override dumps (PR#63-review)

cemililik
and
claude
committed
fix(cli): reject NaN/inf in float flag validators (PR#63-review)

cemililik
and
claude
committed
fix(cli): exact-prefix checkpoint suffix match in resume resolver (PR#63-review)

cemililik
and
claude
committed
fix(cli): guard reject-path audit write with OSError handling (PR#63-review)

cemililik
and
claude
committed
fix(cli): sanitise PathTraversalRefused audit error_message (PR#63-review)

cemililik
and
claude
committed
fix(cli): reject non-list manifest 'artifacts' with exit-1 contract (PR#63-review)

cemililik
and
claude
committed
fix(compliance): surface rollback failures + reject empty strict-HMAC secret (PR#63-review)

cemililik
and
claude
committed
perf(data_audit): single-decode JSONL streaming hot path (PR#63-review)

cemililik
and
claude
committed
fix(data): route falsy non-string System cells through clean_string (PR#63-review)

cemililik
and
claude
committed
fix(judge): reject positional {} placeholders in rubric validation (PR#63-review)

cemililik
and
claude
committed
fix(safety): broaden placeholder-head detection to any LABEL_N vocabulary (PR#63-review)

cemililik
and
claude
committed
fix(review): resolve critical + high findings (PR#61/#63 review)

cemililik
and
claude
committed
fix(review): resolve medium findings (PR#61/#63 review)

cemililik
and
claude
committed
fix(review): resolve low + nit findings (PR#61/#63 review)

cemililik
and
claude
committed
test(review): reset tier-disagreement dedup set in eu_ai_act test (PR#61/#63 review)

cemililik
and
claude
committed