security: fail cache-trash permanent deletion closed - #263

Draft

seonghobae wants to merge 287 commits into

fix/release-artifact-windows-namespace-v1from

feat/physical-cache-reclaim-v1

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 26, 2026

docs: describe cache Trash purge fail-closed boundary
seonghobae
committed
a051d5f
Keep unavailable cache purge guidance actionable
seonghobae
committed
1cf2f4d
docs: record fail-closed cache Trash review behavior
seonghobae
committed
68c0859
docs: record object-bound cache purge requirement
seonghobae
committed
22b2f27
Merge remote-tracking branch 'origin/feat/physical-cache-reclaim-v1' into HEAD
seonghobae
committed
0102db7
Merge remote-tracking branch 'origin/feat/physical-cache-reclaim-v1' into HEAD
seonghobae
committed
d0ff1c0
test: reject misleading cache-trash platform copy
seonghobae
committed
d9cdf22
fix: enforce actionable customer-facing copy
seonghobae
committed
1028fc9
Merge remote-tracking branch 'origin/feat/physical-cache-reclaim-v1' into HEAD
seonghobae
committed
fe11990
test: reject misleading non-mac cache-trash support
seonghobae
committed
7663bd7
fix: describe cache-trash support without overstating purge
seonghobae
committed
b8c3a26
fix: clarify cache trash deletion boundary
seonghobae
committed
927cee9
Merge remote-tracking branch 'origin/feat/physical-cache-reclaim-v1' into HEAD
seonghobae
committed
9a22460
fix: distinguish macOS cache review from purge support
seonghobae
committed
702440f
test: bind cache-trash scope copy to availability contract
seonghobae
committed
8f0dc5f
Merge remote-tracking branch 'origin/feat/physical-cache-reclaim-v1' into HEAD
seonghobae
committed
26d34b1
fix: remove misleading cache-trash platform claim
seonghobae
committed
9027c0f
test: keep cache copy contract synchronized
seonghobae
committed
9045627
Merge remote-tracking branch 'origin/feat/physical-cache-reclaim-v1' into HEAD
seonghobae
committed
f0c3be2
refactor: remove dead cache-trash support state
seonghobae
committed
cc423cd
Merge remote-tracking branch 'origin/feat/physical-cache-reclaim-v1' into HEAD
seonghobae
committed
9dd965e
chore: format cache trash guard
seonghobae
committed
60085ba
test: refuse unsafe cache-trash CLI permanent deletion
seonghobae
committed
d36efa9
fix: fail closed on cache-trash CLI permanent delete
seonghobae
committed
49ced5b
fix: keep cloud errors customer actionable
seonghobae
committed
bd54641
Merge remote-tracking branch 'origin/feat/physical-cache-reclaim-v1' into HEAD
seonghobae
committed
8f22826
fix: remove pathname-recursive cache-trash purge authority
seonghobae
committed
a2c0f47
test: distinguish cache purge operation and audit failures
seonghobae
committed
1e7b594
chore: format cache cleanup cli
seonghobae
committed
c0a9cce
fix: distinguish cache purge operation and audit failures
seonghobae
committed
b2397f0
Merge remote-tracking branch 'origin/feat/physical-cache-reclaim-v1' into HEAD
seonghobae
committed
2b2185c
fix: distinguish cache purge and journal failures
seonghobae
committed
a219d09
test: enforce bounded cache purge feedback
seonghobae
committed
cbb6ded
Merge remote-tracking branch 'origin/feat/physical-cache-reclaim-v1' into HEAD
seonghobae
committed
4b90d3a
test: distinguish production date confidence labels
seonghobae
committed
e5f2055
fix: label production date confidence accurately
seonghobae
committed
57f8bf2
test: gate platform-specific cache cleanup imports
seonghobae
committed
76a0005
Merge remote-tracking branch 'origin/feat/physical-cache-reclaim-v1' into HEAD
seonghobae
committed
2970222
test: bind purge error copy to its helper
seonghobae
committed
c6ddd73
fix: render production date confidence accurately
seonghobae
committed
8189f17
Merge remote-tracking branch 'origin/feat/physical-cache-reclaim-v1' into HEAD
seonghobae
committed
a05a443
docs: align cache reclaim baseline with fail-closed behavior
seonghobae
committed
5f7a7e1
fix: preserve cache cleanup CLI evidence shape
seonghobae
committed
67786cb
test: create nested trash paths portably
seonghobae
committed
83d9022
test: fail closed when Organize markup markers are absent
seonghobae
committed
df2a743
test: fail closed when Cleanup markup markers are absent
seonghobae
committed
674ac53
test: require cache cleanup handlers in coverage builds
seonghobae
committed
69e6f4e
test: validate customer markup boundaries safely
seonghobae
committed
5c28b7c
fix: keep cache cleanup handlers in coverage builds
seonghobae
committed
6a9eb21
Merge remote-tracking branch 'origin/feat/physical-cache-reclaim-v1' into HEAD
seonghobae
committed
7d43bd0
docs: record current customer-copy and PR evidence
seonghobae
committed
869f86c
fix: keep cache review actionable when purge is blocked
seonghobae
committed
b85a31a
docs: record follow-up customer-copy fixes
seonghobae
committed
c036d7c
docs: bind gap baseline to latest exact head
seonghobae
committed
7cd2e62
docs: record current disk and worktree evidence
seonghobae
committed
68d4a9f
fix: align cache trash CLI guidance
seonghobae
committed
a7a5241
docs: record cache CLI guidance fix
seonghobae
committed
c3abfe2
fix: enforce actionable customer guidance
seonghobae
committed
b4acaaf
docs: record customer copy and cache boundary
seonghobae
committed
d570d37
copy: guide empty reconciliation state
seonghobae
committed
c360185
fix: separate cache purge retry outcomes
seonghobae
committed
7787c06
docs: record cache purge outcome states
seonghobae
committed
6b2be59
test: remove unused customer-copy fixture read
seonghobae
committed
09e1fd7
fix(release): include artifact compatibility verifier
seonghobae
committed
92df2ed
copy: explain when Trash space is reclaimed
seonghobae
committed
dacedc0
docs: record release verifier and Trash guidance
seonghobae
committed
2f3d130
docs: keep physical reclaim out of canonical baseline owner
seonghobae
committed
841b157
feat: suggest repository retention reference
seonghobae
committed
e635aae
test: cover retention reference fallback
seonghobae
committed
38a7668
docs: record reclaim review boundaries
seonghobae
committed
e31243b
merge main into physical reclaim lane
seonghobae
committed
0d07044
fix: align release artifact verifier with Windows runner
seonghobae
committed
9d1b349
test: require visible iCloud eviction approval value
seonghobae
committed
70623ca
fix: show iCloud eviction approval value
seonghobae
committed
df5d6ab
chore: keep release verifier repair in canonical owner
seonghobae
committed
2133381
security: converge cache-trash fail-closed repair on current main
seonghobae
committed
66fc7d0
refactor: remove unreachable cache-trash purge result
seonghobae
committed
e0e75bc
Merge remote-tracking branch 'origin/fix/release-artifact-windows-namespace-v1' into HEAD
seonghobae
committed
ccdb035
chore: keep cache-trash PR within owner boundary
seonghobae
committed
87b4781
chore: restore release verifier ownership boundary
seonghobae
committed
6deb5ea
fix: verify Windows release artifact namespace
seonghobae
committed
299c94f
fix: bind release artifacts to platform directories
seonghobae
committed
6355c57
fix: verify tag artifacts before sbom
seonghobae
committed
34f6e22
chore: restore cache-trash owner boundary
seonghobae
committed
d4e7f82
chore: preserve release verifier ownership
seonghobae
committed
f797100
fix: keep cache journal helpers in coverage builds
seonghobae
committed
766e45f
fix: honor XDG trash location for current home
seonghobae
committed
a4bdafa
test: bind Linux cache-trash evidence to XDG data home
seonghobae
committed
1716fed
test: cover XDG trash routing
seonghobae
committed
e850498
Revert "chore: preserve release verifier ownership"
seonghobae
committed
672bede
Revert "chore: restore cache-trash owner boundary"
seonghobae
committed
a40429e
chore: keep release verifier owned by release PR
seonghobae
committed
e70f3d8
chore: remove release verifier mode drift
seonghobae
committed
ab648af
fix: match Windows release artifact runner
seonghobae
committed
62f10ad
fix(ui): keep customer copy actionable
seonghobae
committed
fe4fa72
test(ui): guard customer copy markup bounds
seonghobae
committed
567a945
fix(ui): remove duplicate cloud guidance
seonghobae
committed
bf61404
fix(ui): keep all customer guidance actionable
seonghobae
committed
695f861

Commits on Aug 27, 2026

Commits on Aug 28, 2026

fix(ui): enforce actionable customer copy boundary
seonghobae
committed
3e8af4d
feat(cache): include Playwright browser cache
seonghobae
committed
0603583
chore: reconverge cache-trash repair scope
seonghobae
committed
137680e

Commits on Aug 29, 2026

Commits on Aug 30, 2026

test: reject provider cache aliases
seonghobae
committed
a27aefa
merge: converge release verifier into cache safety owner
seonghobae
committed
2ef4243

Commits on Aug 31, 2026

Commits on Sep 3, 2026

chore: converge cache-trash safety onto current main
seonghobae
committed
2350e81
fix: restore release verifier ownership boundary
seonghobae
committed
5bdbadf
fix: preserve protected verifier file mode
seonghobae
committed
d6be416
fix(stack): bind cache safety repair to release verifier owner
seonghobae
committed
78bae57
fix(stack): preserve complete release verifier foundation
seonghobae
committed
96b6eaf
test: reject invalid negative paths-ignore filters
seonghobae
committed
5e2e54b
fix(ci): use valid ordered path filters for contract docs
seonghobae
committed
47d16e0
test: reproduce paths-ignore parser blind spots
seonghobae
committed
439431a
fix(test): inspect every paths-ignore list item
seonghobae
committed
80c8971
test: lock fail-closed cache-trash operator guidance
seonghobae
committed
abc7d85
docs: make cache-trash operator guidance fail closed
seonghobae
committed
c860ab0
test: require superseding cache-trash safety ADR
seonghobae
committed
80b5a5c
docs: supersede unsafe cache-trash deletion decision
seonghobae
committed
2e02269
docs: propose fail-closed cache-trash deletion ADR
seonghobae
committed
1242d3c
docs: index proposed cache-trash safety decision
seonghobae
committed
3cd1988
merge: restack path-filter repair on release verifier
seonghobae
committed
bf8be64
merge: restack path-filter repair on release contract inheritance
seonghobae
committed
5b005dd
merge(stack): inherit release binary isolation contracts
seonghobae
committed
96c38af

Commits on Sep 4, 2026

restack(ci): adopt current release foundation
seonghobae
committed
8633229
chore(stack): adopt bounded Vitest worker foundation
seonghobae
committed
e0bf338
chore(stack): adopt current release foundation
seonghobae
committed
c52c649
chore(stack): restack path-filter repair on release owner
seonghobae
committed
7440ceb
chore(stack): adopt current release foundation
seonghobae
committed
0401a4f
chore(stack): adopt exact release contract repair
seonghobae
committed
b3b52fe
chore(stack): adopt exact release test repair
seonghobae
committed
9e236eb
chore: restack cache-trash security on current release owner
seonghobae
committed
f25f51a
chore: restack path-filter owner on current release foundation
seonghobae
committed
7523243

Commits on Sep 5, 2026

Commits on Sep 6, 2026

Commits on Sep 9, 2026

merge(ci): adopt current release/Test foundation
seonghobae
committed
5b4e656
test(ci): require provider OAuth Windows process contract
seonghobae
committed
13aa167
fix(ci): run provider OAuth process contract on Windows
seonghobae
committed
8b0e2b5
test(ci): require explicit agent-state skip evidence
seonghobae
committed
0e53be7
fix(ci): make agent-state source absence explicit
seonghobae
committed
e17c2ad
test(ci): make exact-head checkout contract lane-extensible
seonghobae
committed
8a10edc
chore: adopt current release foundation into Test owner
seonghobae
authored
02a95a6
fix(ci): isolate Ubuntu dependency refresh
seonghobae
committed
f6c1d9a
test(ci): lock Ubuntu apt isolation contract
seonghobae
committed
f5a7402
docs(adr): renumber cache-trash decision after live owner stack
seonghobae
committed
b72bd5b
docs(adr): point cache-trash supersession to ADR-0020
seonghobae
committed
f36e0d2
docs(adr): remove colliding cache-trash ADR-0012 path
seonghobae
committed
76a047c

Commits on Sep 10, 2026

fix(adr): finish cache-trash ADR-0020 migration
seonghobae
committed
2ae01b8
docs(adr): bound permanent-delete capability by platform primitives
seonghobae
committed
04e72fa
test(ci): require bounded npm failure phase diagnostics
seonghobae
committed
90e3d8b
fix(ci): expose failed npm test phase without weakening gate
seonghobae
committed
e855260
test(ci): use expression-safe npm test step id
seonghobae
committed
11a089f
fix(ci): use expression-safe diagnostic step id
seonghobae
committed
ecd74a9
test(ci): require original npm failure evidence
seonghobae
committed
da57069
fix(ci): retain authoritative npm failure transcript
seonghobae
committed
442ea0d

Commits on Sep 11, 2026

Commits on Sep 12, 2026

test(ci): expose shared Test owner gaps on protected main
seonghobae
committed
9558c85
fix(ci): restack shared Test owner on protected main
seonghobae
committed
8377227
test(ci): harden shared Test workflow contracts
seonghobae
committed
cef7ffe
test(ci): expose cross-event path-filter bleed
seonghobae
committed
a2edb18
fix(ci): scope path parsing to its workflow event
seonghobae
committed
3f5c516
test(release): align retry contract with PR-only cancellation
seonghobae
committed
3e05a9f
test(release): require docs to match PR-scoped retry semantics
seonghobae
committed
078e57c
docs(release): align concurrency evidence with PR-only cancellation
seonghobae
committed
7d97076
docs(release): align rerun concurrency evidence wording
seonghobae
committed
634870b
chore(ci): restack shared Test owner on release repair
seonghobae
committed
e21da71
test(ci): require lockfile-bound Cargo commands
seonghobae
committed
7f0f834
fix(ci): lock canonical Cargo dependency graph
seonghobae
committed
b05919f
test(ci): align Cargo lock contract with canonical lanes
seonghobae
committed
a535f07
test(ci): align macOS admission expectation with lockfile-bound Cargo
seonghobae
committed
f2d87f6
test(ci): require Rust failure transcript
seonghobae
committed
fc3ee0c
fix(ci): preserve Rust failure transcript
seonghobae
committed
e4e36de

Commits on Sep 14, 2026

test(runtime): publish stress executable before concurrency
seonghobae
committed
7cf00b1
test(runtime): isolate process stress from fixture publication
seonghobae
committed
a0284e5
docs(safety): forbid broad manual Trash deletion
seonghobae
committed
03aefeb
docs(safety): make manual Trash reclaim selective
seonghobae
committed
2d3761f
docs(adr): mark withdrawn permanent cache purge policy
seonghobae
committed
9fd8d26
test(runtime): reproduce escaped pipe writer stall
seonghobae
committed
9fc6bd5

Commits on Sep 15, 2026

Commits on Sep 16, 2026

merge(runtime): adopt current Unix lifecycle owner
seonghobae
committed
807b664
merge(ci): adopt canonical shared Test owner
seonghobae
committed
2f65422
test(ci): require Windows staging rollback evidence
seonghobae
committed
673c463
fix(ci): execute Windows staging rollback regression
seonghobae
committed
b5885de
fix(ci): bind Windows safety source admission
seonghobae
committed
0b0160f
fix(ci): make Windows safety admission exact
seonghobae
committed
5703cfa
fix(ci): verify Windows safety regression execution
seonghobae
committed
c9502f9
test(ci): reject Windows source-text admission
seonghobae
committed
e7e24d8
fix(ci): gate Windows safety on owner contract
seonghobae
committed
0e79211
test(cache): use platform-aware Trash paths
coderabbitai[bot]
committed
3b8554e
test(cache): align operator docs contract with ADR-0020
seonghobae
committed
543286e
test(cache): adopt current ADR-0020 operator contract
seonghobae
committed
2cedb05
test(cache): normalize wrapped operator guidance
seonghobae
committed
1753ece
test(cache): inherit wrapped operator guidance repair
seonghobae
committed
f24ee7f

Commits on Sep 17, 2026