Skip to content

Audit public artifacts before release - #11

Merged
thabatarj8-stack merged 1 commit into
mainfrom
codex/publication-safety-audit
Aug 27, 2026
Merged

thabatarj8-stack merged 1 commit into
mainfrom
codex/publication-safety-audit

Conversation

@thabatarj8-stack

Copy link
Copy Markdown
Owner

What changed

  • add a reproducible publication-safety scanner for the current tree and reachable Git history
  • block recognized secrets, direct email addresses, credential URLs, and sensitive filenames in CI
  • add focused scanner tests
  • document the 2026-08-27 audit, its limitations, and the author-email metadata finding
  • record the public-artifact review as complete in the roadmap

Important finding

The file contents passed, and GitHub reports no secret-scanning alerts. Existing commit metadata exposes the author personal email address. This PR documents the exposure but does not rewrite history.

Validation

  • python scripts/audit_publication_safety.py --history
  • python -m unittest discover -s reproducibility/tests -v
  • python scripts/check_local_links.py
  • python scripts/validate_experiment_002.py
  • python reproducibility/scripts/validate.py

@thabatarj8-stack
thabatarj8-stack merged commit 4497e1b into main Aug 27, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant