fix(security): harden fork workflow-run context - #88

Merged

Sayt-0 merged 7 commits into

mainfrom

fix/aia-16-e2e-fork-pr-security

Aug 21, 2026

Commits on Aug 20, 2026

fix(e2e): remove privileged fork PR execution
aheritier
committed
214b06a
feat(security): add trusted trigger-context resolver
aheritier
committed
4bbe7a7
fix(review-pr): canonicalize fork review context and pin review SHA
aheritier
committed
0851ee9
fix(review-pr): rebuild feedback replies from live context
aheritier
committed
1553e4f
fix(review-pr): rebuild mention replies from live context
aheritier
committed
adf890c
docs(security): minimize trigger artifacts and document trust boundary
aheritier
committed
78774e5
test(security): add workflow regression coverage for AIA-16
aheritier
committed
eca6cad