feat(ci): default-on security review — path-filtered caller + posture ADR - #722

Merged

kyle-sexton merged 8 commits into

mainfrom

feat/696-security-review-caller

Jul 20, 2026

Commits on Jul 20, 2026

feat(ci): default-on security review — path-filtered caller + posture ADR (#696, #509)

kyle-sexton
and
claude
committed
3feef14
fix(ci): cover MCP-server source and compiled JS in the security-review path filter

kyle-sexton
and
claude
committed
a14450a
fix(ci): include MCP launch configurations in the security-review path filter

kyle-sexton
and
claude
committed
a845663
fix(ci): include plugin bin wrappers in the security-review path filter

kyle-sexton
and
claude
committed
b2277e5
fix(ci): cover dependency and plugin manifests in the security-review path filter

kyle-sexton
and
claude
committed
1066c43
fix(ci): treat instruction assets and the marketplace manifest as security surfaces

kyle-sexton
and
claude
committed
28cffd3
docs(adr): frame ADR 0002 as the interim posture pending the #509 enforcement design ruling

kyle-sexton
and
claude
committed
6e4066c
fix(ci): include root agent-instruction files in the security-review path filter

kyle-sexton
and
claude
committed
0465acc