Repository navigation

fix(noema): bind central handoff to live PR base identity - #2111

Draft

seonghobae wants to merge 46 commits into

mainfrom

codex/noema-central-handoff-base-binding

Commits on Sep 12, 2026
- fix(noema): bind central handoff to live PR base identity
  
  seonghobae
  and
  codex
  committed
  ec89c6f
Commits on Sep 18, 2026
- merge(main): resolve #2111 conflicts; keep noema live-base handoff
  
  seonghobae
  and
  cursoragent
  committed
  f993700
- fix(security): allowlist https://api.github.com before urllib urlopen
  
  seonghobae
  and
  cursoragent
  committed
  a83d6d3
- test(security): pin GitHub API redirect credential boundary
  seonghobae
  committed
  225260a
- fix(security): contain GitHub API redirects to admitted origin
  seonghobae
  committed
  0ae2204
- test(security): pin Strix redirect credential boundary
  seonghobae
  committed
  062663a
- fix(security): contain Strix GitHub API redirects
  seonghobae
  committed
  2708a6b
- chore(deps): bump anyio from 4.14.0 to 4.14.2
  dependabot[bot]
  authored
  3758b89
Commits on Sep 19, 2026
- test(security): align Strix transport seam with dedicated opener
  seonghobae
  committed
  4dcd25c
- test(security): bind authenticated openers at owned seams
  seonghobae
  committed
  834d285
- merge(security): carry #2269 urllib GitHub API opener into #2278
  seonghobae
  committed
  6d10002
- chore(deps): isolate AnyIO security owner delta
  seonghobae
  committed
  545648e
- merge: carry AnyIO lock update onto protected owner
  seonghobae
  committed
  c51c8d2
- fix(opencode): materialize every coverage lock input
  seonghobae
  committed
  e43a75b
- docs(gap): bind coverage repair to canonical PR
  seonghobae
  committed
  c4a73a1
- test(strix): bind evidence helper to trusted source root
  seonghobae
  committed
  513302a
- fix(strix): resolve evidence binder from trusted source
  seonghobae
  committed
  c08b13d
- test(strix): materialize trusted binder fixtures
  seonghobae
  committed
  ca7e1e7
- fix(strix): restore complete verified fixture tree
  seonghobae
  committed
  db1fd61
- test(strix): require consumer-free trusted binder fixture
  seonghobae
  committed
  fb9c0e2
- repair(strix): restore executable harness after binary blob corruption
  seonghobae
  committed
  78b33a8
- test(strix): require binder-free consumer fixture
  seonghobae
  committed
  191bd63
- test(strix): separate trusted gate from consumer root
  seonghobae
  committed
  ef1a866
- docs(strix): bind consumer isolation evidence to exact commits
  seonghobae
  committed
  abc9a7d
- docs(strix): describe separated trusted runtime fixture
  seonghobae
  committed
  00082e8
Commits on Sep 20, 2026
- test(strix): retain canonical gate source under scan
  seonghobae
  committed
  782d67b
- fix(deps): restore AnyIO owner isolation
  seonghobae
  committed
  8a5251b
- test(strix): red specialized fixture owner boundary
  seonghobae
  committed
  a8d6261
Commits on Sep 21, 2026
- test(strix): materialize specialized fixtures' trusted runtime outside the consumer root
  
  Seongho Bae
  and
  claude
  committed
  bbe225d
- test(strix): pin trusted evidence-binder path
  seonghobae
  committed
  1794626
Commits on Sep 23, 2026
- repair(codeql): restore exact endpoint-set assertion
  seonghobae
  committed
  657d104
- chore(foundation): converge dependency and CodeQL repairs
  seonghobae
  committed
  f1a8dc8
Commits on Sep 24, 2026
- fix(opencode): adopt AnyIO security prerequisite
  seonghobae
  committed
  42e4198
- fix(test-gate): restore full branch coverage
  seonghobae
  committed
  38cfcae
- test(queue-health): scope permission assertion to workflow token
  seonghobae
  committed
  21247ef
- test(queue-health): isolate collector edge cases
  seonghobae
  committed
  57c168b
- repair(foundation): converge CodeQL endpoint contract into coverage owner
  seonghobae
  committed
  f229816
Commits on Sep 25, 2026
- fix(security): update AnyIO lock for audit gate
  seonghobae
  committed
  3b3ce16
Commits on Sep 26, 2026
- fix(codeql): unblock CodeQL scan dispatch for all .github PRs
  seonghobae
  committed
  14fe2b6
- repair(foundation): converge coverage, dependency, and CodeQL owners
  seonghobae
  committed
  950ab88
- fix(ci): bind AnyIO security pin to Strix input
  seonghobae
  committed
  8e1aba9
- merge: adopt current CI owner and repair CodeQL URL oracle
  seonghobae
  committed
  361a9eb
- test(strix): require Job Analysis authority context
  seonghobae
  committed
  1fd22f4
- fix(strix): include Job Analysis authority context
  seonghobae
  committed
  808a8a7
- docs(strix): record Job Analysis authority context
  seonghobae
  committed
  b90d873
- merge(owner): restack Noema handoff on current security stack
  seonghobae
  committed
  125d488

Commits

Commits on Sep 12, 2026

Commits on Sep 18, 2026

Commits on Sep 19, 2026

Commits on Sep 20, 2026

Commits on Sep 21, 2026

Commits on Sep 23, 2026

Commits on Sep 24, 2026

Commits on Sep 25, 2026

Commits on Sep 26, 2026