fix(strix): resolve evidence binder from trusted source - #2291

Open

seonghobae wants to merge 46 commits into

mainfrom

codex/strix-trusted-binder-root

Commits on Sep 18, 2026

fix(security): allowlist https://api.github.com before urllib urlopen

seonghobae
and
cursoragent
committed
a83d6d3
test(security): pin GitHub API redirect credential boundary
seonghobae
committed
225260a
fix(security): contain GitHub API redirects to admitted origin
seonghobae
committed
0ae2204
test(security): pin Strix redirect credential boundary
seonghobae
committed
062663a
fix(security): contain Strix GitHub API redirects
seonghobae
committed
2708a6b
chore(deps): bump anyio from 4.14.0 to 4.14.2
dependabot[bot]
authored
3758b89

Commits on Sep 19, 2026

test(security): align Strix transport seam with dedicated opener
seonghobae
committed
4dcd25c
test(security): bind authenticated openers at owned seams
seonghobae
committed
834d285
merge(security): carry #2269 urllib GitHub API opener into #2278
seonghobae
committed
6d10002
chore(deps): isolate AnyIO security owner delta
seonghobae
committed
545648e
merge: carry AnyIO lock update onto protected owner
seonghobae
committed
c51c8d2
fix(opencode): materialize every coverage lock input
seonghobae
committed
e43a75b
docs(gap): bind coverage repair to canonical PR
seonghobae
committed
c4a73a1
test(strix): bind evidence helper to trusted source root
seonghobae
committed
513302a
fix(strix): resolve evidence binder from trusted source
seonghobae
committed
c08b13d
test(strix): materialize trusted binder fixtures
seonghobae
committed
ca7e1e7
fix(strix): restore complete verified fixture tree
seonghobae
committed
db1fd61
test(strix): require consumer-free trusted binder fixture
seonghobae
committed
fb9c0e2
repair(strix): restore executable harness after binary blob corruption
seonghobae
committed
78b33a8
test(strix): require binder-free consumer fixture
seonghobae
committed
191bd63
test(strix): separate trusted gate from consumer root
seonghobae
committed
ef1a866
docs(strix): bind consumer isolation evidence to exact commits
seonghobae
committed
abc9a7d
docs(strix): describe separated trusted runtime fixture
seonghobae
committed
00082e8

Commits on Sep 20, 2026

test(strix): retain canonical gate source under scan
seonghobae
committed
782d67b
fix(deps): restore AnyIO owner isolation
seonghobae
committed
8a5251b
test(strix): red specialized fixture owner boundary
seonghobae
committed
a8d6261

Commits on Sep 21, 2026

test(strix): materialize specialized fixtures' trusted runtime outside the consumer root

Seongho Bae
and
claude
committed
bbe225d
test(strix): pin trusted evidence-binder path
seonghobae
committed
1794626

Commits on Sep 23, 2026

Commits on Sep 25, 2026

fix(security): update AnyIO lock for audit gate
seonghobae
committed
3b3ce16

Commits on Sep 26, 2026

fix(codeql): unblock CodeQL scan dispatch for all .github PRs
seonghobae
committed
14fe2b6
repair(foundation): converge coverage, dependency, and CodeQL owners
seonghobae
committed
950ab88
fix(ci): bind AnyIO security pin to Strix input
seonghobae
committed
8e1aba9
merge: adopt current CI owner and repair CodeQL URL oracle
seonghobae
committed
361a9eb
test(strix): require Job Analysis authority context
seonghobae
committed
1fd22f4
fix(strix): include Job Analysis authority context
seonghobae
committed
808a8a7
docs(strix): record Job Analysis authority context
seonghobae
committed
b90d873

Commits on Sep 27, 2026

fix(strix): fail closed on missing Job Analysis context
seonghobae
committed
5ee6c87
docs: record required Strix context evidence
seonghobae
committed
20f4556
docs: qualify Orgmetra evidence references
seonghobae
committed
c7b5e75