Repository navigation

W1: foundation — CI, lint gate, HTTP harness, logger, hardened workflows - #2

Open

EgerDev wants to merge 20 commits into

hardening/w0-containmentfrom

hardening/w1-foundation

Open

W1: foundation — CI, lint gate, HTTP harness, logger, hardened workflows#2
EgerDev wants to merge 20 commits into
hardening/w0-containmentfrom
hardening/w1-foundation

Commits on Sep 24, 2026
- docs(plans): apply W1 pre-flight rulings (no sandbox module, trailers, Windows anchors)
  
  EgerDev
  and
  claude
  committed
  14cab04
- build: pin Node 24, node-server preset, loopback dev server, build without migrations
  
  EgerDev
  and
  claude
  committed
  4242c6f
- refactor(lint): drop dead imports in src/lib and the extension popup
  
  EgerDev
  and
  claude
  committed
  d074cbb
- refactor(lint): drop dead imports and unused props in bulk and transcript components
  
  EgerDev
  and
  claude
  committed
  b4bd784
- refactor(lint): keep component modules component-only; delete dead ingest bookmarklet
  
  EgerDev
  and
  claude
  committed
  c27179f
- refactor(lint): document mount-once effects; clear post-W0 lint residue
  
  EgerDev
  and
  claude
  committed
  e2aa640
- ci(lint): make every rule an error, ban in-process eval and server console
  
  EgerDev
  and
  claude
  committed
  bbf217e
- test(http): add built-server harness and first black-box tests
  
  EgerDev
  and
  claude
  committed
  06441e4
- test(http): allowlist the harness child env and harden cleanup
  
  EgerDev
  and
  claude
  committed
  7dfc342
- feat(log): add redacting structured server logger
  
  EgerDev
  and
  claude
  committed
  6cf2ccd
- fix(log): drop functions, never throw, bound output, redact header tuples
  
  EgerDev
  and
  claude
  committed
  cf27347
- test: give media-parser tests real fixtures; pin media filename header
  
  EgerDev
  and
  claude
  committed
  f8ade22
- ci(auto-update): split untrusted update from PR creation; verify with build
  
  EgerDev
  and
  claude
  committed
  bd4f493
- ci(auto-update): hand off manifests as files, validate before git, narrow the App token
  
  EgerDev
  and
  claude
  committed
  77760e2
- ci: add required CI workflow with pinned actions and Postgres-backed HTTP tests
  
  EgerDev
  and
  claude
  committed
  cc864c2
- ci: add Dependabot, CodeQL, dependency review, Scorecard and CODEOWNERS
  
  EgerDev
  and
  claude
  committed
  31e9693
- ci: stop ignoring jose; tighten workflow policy; drop unneeded checkout
  
  EgerDev
  and
  claude
  committed
  e75c373
- test(http): name the harness env test for what it checks
  
  EgerDev
  and
  claude
  committed
  b140b46
- docs(plans): record W1 progress, hand-offs and the executing-model trailer rule
  
  EgerDev
  and
  claude
  committed
  79e3099
Commits on Sep 25, 2026
- test(ci): escape every regex metacharacter when building the Dependabot ignore check
  
  EgerDev
  and
  claude
  committed
  27f08bc

Commits

Commits on Sep 24, 2026

Commits on Sep 25, 2026