docs(orchestrator): confirm orchestrator/free pin, audit gateway enforcement - #1661

Draft

seonghobae wants to merge 190 commits into

mainfrom

claude/contextual-orchestrator-integration-8ec7f8

Commits on Sep 2, 2026

docs(orchestrator): confirm orchestrator/free pin and audit gateway enforcement

seonghobae
and
claude
committed
54963fc
fix(docs): merge main and address Devin review on PR #1661

seonghobae
and
claude
committed
5f1c8e5
docs(adr): fix ADR-0003's Decision/Consequences sections still describing Strix on orchestrator/auto

seonghobae
and
claude
committed
8fe4677
docs(gap-baseline): record contextual-orchestrator#1010 repair-not-close recheck

seonghobae
and
claude
committed
2dfe65f
Merge origin/main into PR #1661, fix Devin cross-repo reference findings

seonghobae
and
claude
committed
b2dd497
docs(gap-baseline): record the per-model timeout allocator design PR

seonghobae
and
claude
committed
494c8c1
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
bcdfd43
docs(gap-baseline): record org-wide Actions incident, CodeQL ruleset gap fix

seonghobae
and
claude
committed
e7908a5
docs(gap-baseline): record CodeQL doc reconciliation, dependency-review consolidation

seonghobae
and
claude
committed
68c3d41
docs(gap-baseline): correct the #1714/#1715 debris-removal characterization

seonghobae
and
claude
committed
85e4da5
docs(gap-baseline): record the hidden-model-timeout sweep for item 39

seonghobae
and
claude
committed
a222b94
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
bef3e85
docs: address CodeRabbit findings (evidence-level accuracy, MD018/MD040)

seonghobae
and
claude
committed
f99a8f1
docs(gap-baseline): record SHA-pin/check-name fixes and peer coordination

seonghobae
and
claude
committed
41bc940
docs(gap-baseline): record item 18 audit and kaefa#84 caller-sync fix

seonghobae
and
claude
committed
9992897
docs(gap-baseline): record the full org-wide workflow-duplication survey

seonghobae
and
claude
committed
6c7a60c
docs(gap-baseline): record naruon consolidation landing + 4-caller re-pin

seonghobae
and
claude
committed
4834214
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
15db7e0
docs(gap-baseline): trace the piling-up complaint to pre-fix zombie runs

seonghobae
and
claude
committed
bdd3bb4
docs(gap-baseline): record the full 63-repo zombie-run sweep (16 total)

seonghobae
and
claude
committed
15227b5
docs: correct Strix runtime provenance, clarify orchestrator/auto entry path

seonghobae
and
claude
committed
9b25120
docs(gap-baseline): re-verify the 13-repo sweep with owner-qualified links

seonghobae
and
claude
committed
3e5c93f
docs(gap-baseline): record the concurrency-ceiling answer to the piling-up complaint

seonghobae
and
claude
committed
c120f33
docs(gap-baseline): correct the concurrency-ceiling claim's methodology

seonghobae
and
claude
committed
6a0eb96
docs(gap-baseline): stop mixing run-count and job-count in the final range

seonghobae
and
claude
committed
abe975b
docs(gap-baseline): confirm demand-volume dominance, record throttle decision

seonghobae
and
claude
committed
36a7252
docs(gap-baseline): close the concurrency-ceiling investigation, user-confirmed

seonghobae
and
claude
committed
ba1e365
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
31af665
docs(doctoring): track the enforce_admins bypass gap as an owner-decidable issue

seonghobae
and
claude
committed
2196f3f
docs(gap-baseline): confirm backlog item 39 (900s repair deadline) resolved

seonghobae
and
claude
committed
d46c28e
docs(gap-baseline): fix item 39 evidence to cite the file call_llm actually lives in

seonghobae
and
claude
committed
2d5dd5f
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
be3714a
docs(gap-baseline): record the .github#1743 bypass-merge with full evidence

seonghobae
and
claude
committed
7a0d366
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
ec215de
docs(gap-baseline): confirm backlog item 25 resolved via contextual-orchestrator#1026

seonghobae
and
claude
committed
1671362
docs(gap-baseline): stop restating the backlog's inaccurate #1010 citation as fact

seonghobae
and
claude
committed
e0c1935
docs(gap-baseline): fix the #1010 attribution error at its actual source

seonghobae
and
claude
committed
d62f0e1
docs(gap-baseline): scope item 22 -- keyverse#103 already covers most of it

seonghobae
and
claude
committed
2b1769a
docs(gap-baseline): fix item 22 scope -- general KV is unstarted, not covered

seonghobae
and
claude
committed
428d23a
docs(gap-baseline): fix item 22 -- admin-console pages conflict with binding policy

seonghobae
and
claude
committed
54bc672
docs(gap-baseline): fix item 22 -- credential store is open under both readings

seonghobae
and
claude
committed
d4a795f
docs(gap-baseline): confirm backlog item 13 resolved -- cancel-on-push already works

seonghobae
and
claude
committed
e55f829
docs(gap-baseline): confirm backlog item 38 resolved -- org ruleset already covers new repos

seonghobae
and
claude
committed
e7bb6f0
docs(gap-baseline): fix item 38 -- narrow the stack-adaptivity claim, fix the branch-trigger bug

seonghobae
and
claude
committed
550425f
docs(gap-baseline): fix wrong citation -- Rust hot-path rule is in product-goal-directive.md, not CLAUDE.md

seonghobae
and
claude
committed
28a3eb9
docs(gap-baseline): confirm backlog item 21 resolved -- naruon already uses json_schema

seonghobae
and
claude
committed
2709193
docs(gap-baseline): scope item 20 -- naruon self-service signup is currently broken, not just off-convention

seonghobae
and
claude
committed
6cfaba1
docs(gap-baseline): fix item 20 -- correct endpoint path and note the auth requirement

seonghobae
and
claude
committed
010120c
fix(ci): rerun the contract gate when its own test lock changes

seonghobae
and
claude
committed
e201db6
docs: record strix.yml's cross-PR concurrency starvation, org-wide

seonghobae
and
claude
committed
fab76bd
fix(ci): verify hash-lock reflects pinned requirements; address review feedback

seonghobae
and
claude
committed
aca34ff
docs: credit corroborating NVIDIA NIM 429 incident evidence from peer review

seonghobae
and
claude
committed
68993f2
docs: fix stale busy-check recommendation Devin caught, propagate the correction

seonghobae
and
claude
committed
7bb3e31
docs: fix a TOCTOU-narrowing-is-not-a-fix imprecision Devin caught

seonghobae
and
claude
committed
73ffb60
docs: scope backlog items 23/24 (Noema review depth, failure-case aggregation)

seonghobae
and
claude
committed
ee5c887
docs: correct item 23's overclaim that no verdict storage exists

seonghobae
and
claude
committed
aaeaf71
fix(ci): handle a no-trailing-newline final pin; fix two precision claims

seonghobae
and
claude
committed
8b46081
docs: cite the live API source for the ruleset exclude list

seonghobae
and
claude
committed
abb32d8
fix(docs): the ruleset exclude list IS in org-required-workflow-rollout.md

seonghobae
and
claude
committed
0dcb9b8
fix(noema): DNS-pin the LLM gateway request to close a TOCTOU/SSRF gap

seonghobae
and
claude
committed
59d20a3
fix(noema): close 4 more DNS-pinning gaps found by adversarial review

seonghobae
and
claude
committed
539e9c6
fix(noema): fail closed instead of silently unpinning through a proxy

seonghobae
and
claude
committed
f4b2032
docs: record item 25's own contract test was broken, now fixed

seonghobae
and
claude
committed
c9fc21a
fix(noema): require HTTPS, close CGN gap, respect NO_PROXY in DNS pinning

seonghobae
and
claude
committed
515c9d6
test(noema): add regression test for RFC 6598 CGN address rejection

seonghobae
and
claude
committed
1986a85

Commits on Sep 3, 2026

docs(gap-baseline): record item 26 as substantially complete, one real gap found

seonghobae
and
claude
committed
fb70974
docs(gap-baseline): scope item 28 -- general-guidelines directive not

seonghobae
and
claude
committed
0c74624
docs(gap-baseline): correct item 28's directive-scope and code-reviewer

seonghobae
and
claude
committed
6aeb15b
docs(gap-baseline): scope items 5/6 -- naruon's do-anything agent is

seonghobae
and
claude
committed
03039d0
docs(gap-baseline): correct false CI-green claim on 4 naruon PRs (Devin Review)

seonghobae
and
claude
committed
d78239a
docs(gap-baseline): record quarantine-sandbox-runtime#14 P0 fix (item 5/6)

seonghobae
and
claude
committed
5cdca3b
fix(workflows): close two Actions job-slot waste gaps under the ceiling

seonghobae
and
claude
committed
bdacd1b
docs(gap-baseline): record ceiling-waste audit findings and peer 1's sandbox readiness map

seonghobae
and
claude
committed
3908d30
fix(workflows): stop current-head-run-coalescer.yml self-cancelling under load

seonghobae
and
claude
committed
c0dc46b
docs(gap-baseline): record the queue-thrashing incident and its resolution

seonghobae
and
claude
committed
3f2b0f2
fix(workflows): coalescer needed queue:max, not just cancel-in-progress:false

seonghobae
and
claude
committed
12d5735
docs(gap-baseline): record pushing back on an incorrect Devin finding

seonghobae
and
claude
committed
c49622a
docs(gap-baseline): record naruon#1532 security fix batch (item 20)

seonghobae
and
claude
committed
eb92803
fix(noema): stop mislabeling upstream provider stalls as "connecting"

seonghobae
and
claude
committed
bebd7c7
docs(gap-baseline): record peer's naruon corruption fix and items 4/39 resolution

seonghobae
and
claude
committed
3830d99
fix(noema): don't mislabel a genuine connection failure as provider latency

seonghobae
and
claude
committed
e7b29f2
fix(noema): don't claim false precision for ambiguous transport timeouts

seonghobae
and
claude
committed
5c9d30e
fix(noema-review): scope concurrency group by exact head SHA (item 13)

seonghobae
and
claude
committed
31e46db
docs(gap-baseline): record the third telemetry round and item 13's resolution

seonghobae
and
claude
committed
e2869c3
Merge origin/main into contextual-orchestrator-integration-8ec7f8

seonghobae
and
claude
committed
f2509a3
docs(gap-baseline): correct item 13 framing to proposed-not-merged

seonghobae
and
claude
committed
4d8321a
docs(gap-baseline): fix self-contradiction between the two item-13 sections

seonghobae
and
claude
committed
3eb7d3e
docs(gap-baseline): item 20 registration is implemented, not unstarted

seonghobae
and
claude
committed
7c138e9
Merge origin/main into contextual-orchestrator-integration-8ec7f8

seonghobae
and
claude
committed
713a707
Merge origin/main into contextual-orchestrator-integration-8ec7f8

seonghobae
and
claude
committed
d0d29a6
fix(noema-review): cancel-in-progress:false instead of head-SHA scoping

seonghobae
and
claude
committed
f9d4373
Merge origin/main into contextual-orchestrator-integration-8ec7f8

seonghobae
and
claude
committed
ec3d142
Merge origin/main into contextual-orchestrator-integration-8ec7f8

seonghobae
and
claude
committed
b9b531f
fix(noema-review): extract cancel-superseded logic into its own unblocked job

seonghobae
and
claude
committed
e1e7ae8
Merge origin/main into contextual-orchestrator-integration-8ec7f8

seonghobae
and
claude
committed
389c916
docs(gap-baseline): record the cancel-in-progress:false deadlock bug and fix

seonghobae
and
claude
committed
e236b27
Merge origin/main into contextual-orchestrator-integration-8ec7f8

seonghobae
and
claude
committed
db08bd6
docs(gap-baseline): record opencode-review.yml's deadlock fix landed

seonghobae
and
claude
committed
a523007
Merge origin/main into contextual-orchestrator-integration-8ec7f8

seonghobae
and
claude
committed
d6e135f
Merge origin/main into contextual-orchestrator-integration-8ec7f8

seonghobae
and
claude
committed
e143c2b
docs(gap-baseline): correct item 20 -- ROPC exception acceptance superseded

seonghobae
and
claude
committed
d3bce32
Merge origin/main into contextual-orchestrator-integration-8ec7f8

seonghobae
and
claude
committed
1f573a5
docs(gap-baseline): record item-20 repair -- keyverse#128 ROPC flag disabled

seonghobae
and
claude
committed
f00f210
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
77fa75e
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
59d572f
docs(gap-baseline): record keyverse#128's cascading fix and the #1787 catch

seonghobae
and
claude
committed
4b1ceaa
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
e98836a
docs(gap-baseline): record keyverse#128's third fix pass and #1787's close

seonghobae
and
claude
committed
93b50fe
fix(noema-review): cover repository_dispatch cleanup, flag pending-slot eviction

seonghobae
and
claude
committed
ed0d6fa
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
904ff4f
docs(gap-baseline): record keyverse#128's 4th pass and .github#1661's fixes

seonghobae
and
claude
committed
4398609
fix(noema-review): stop dropping failed cancels, fix false eviction alarms

seonghobae
and
claude
committed
7ad0c23
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
217c99a
docs(gap-baseline): record noema-review.yml's 5th/6th fix pass this tick

seonghobae
and
claude
committed
047c16b
docs(noema-review): record and revert a third eviction-detector fix attempt

seonghobae
and
claude
committed
e790cd4
docs(gap-baseline): record the third eviction-detector fix attempt/revert

seonghobae
and
claude
committed
a36e51b
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
f89f95b
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
a12b574
docs(gap-baseline): record naruon#1539 strix retry + fresh congestion evidence

seonghobae
and
claude
committed
b7947fd
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
59bb418
docs(gap-baseline): record newsdom-api#784 reusable-workflow-call env fix

seonghobae
and
claude
committed
e7df30b
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
82bcb61
docs(gap-baseline): record newsdom-api#794 pypdf 6.16.1 CVE fix

seonghobae
and
claude
committed
d3183fb
fix(noema-review): authenticate cross-repository supersede-cleanup

seonghobae
and
claude
committed
e173d4c
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
b310f52
docs(gap-baseline): record #1661 Devin Review fix and gateway evidence handoff

seonghobae
and
claude
committed
73d2848
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
92dd215
fix(noema-review): support PAT credential for cross-repo cleanup too

seonghobae
and
claude
committed
69109d1
docs(gap-baseline): record #1661 PAT credential-mode fix

seonghobae
and
claude
committed
61306c1
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
3521ae5
fix(tests): sync stale runner-count assertion with #1805's consolidation

seonghobae
and
claude
committed
12194da
docs(gap-baseline): record naruon#1539 dependency-review test fix

seonghobae
and
claude
committed
3acc009
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
ed47312
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
a268168
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
6f9a19d
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
c9366dd
Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
ef38c17
docs(gap-baseline): record naruon#1532's two CI-blocking bugs

seonghobae
and
claude
committed
e7fb7a1
docs(gap-baseline): record keyverse#128's base-branch fix as #143

seonghobae
and
claude
committed
10f9ba3

Commits on Sep 4, 2026

Commits on Sep 5, 2026

Commits on Sep 6, 2026

Commits on Sep 7, 2026

Merge remote-tracking branch 'origin/main' into claude/contextual-orchestrator-integration-8ec7f8
seonghobae
committed
910e261