sysadmin 576349d545 fix(guard): pin session-state authority and reject direct-import mutation (#695) ...

Close remaining AC1/AC2/AC6-8 gaps after REQUEST_CHANGES and the PR #701
recurrence: GITEA_ALLOW_DIRECT_MCP_IMPORT never authorizes mutations;
production transport bind pins GITEA_MCP_SESSION_STATE_DIR so redirected
dirs cannot forge independent decision locks; mark/submit fail closed
offline; quarantine continues to void contaminated merge eligibility.

Regression tests reproduce the PR #701 direct-import + state-dir override
sequence. Full suite: 2665 passed, 6 skipped.

Closes #695 (remediation on PR #696)

2026-07-13 21:48:28 -04:00

..

architecture

feat: first-class control-plane lease lifecycle (Closes #601)

2026-07-10 11:30:53 -04:00

examples

feat: add Controller Handoff + Thread State Ledger validation (#507)

2026-07-08 03:46:25 -04:00

wiki

docs: expand #594 stale decision-lock cleanup guidance

2026-07-09 15:21:21 -04:00

bootstrap-review-path.md

docs: define bootstrap review path for self-hosted MCP fixes (Closes #557)

2026-07-08 22:36:10 -04:00

canonical-state-comments.md

feat: require canonical next-action state comments (#495)

2026-07-08 03:17:38 -04:00

canonical-thread-handoff.md

feat: add Canonical Thread Handoff protocol (Closes #505)

2026-07-08 03:44:58 -04:00

credential-isolation.md

docs: update safety and boundary docs for Jenkins/GlitchTip (#79) (#89)

2026-07-02 14:21:49 -05:00

developer-testing-guidelines.md

test: keep webui CI hermetic offline

2026-07-09 11:59:23 -04:00

gitea-dual-namespace-deployment.md

fix: align example config with reviewer merger separation

2026-07-08 02:19:37 -04:00

gitea-execution-profiles.md

fix: align example config with reviewer merger separation

2026-07-08 02:19:37 -04:00

issue-acceptance-gate.md

feat: add controller issue-acceptance gate (Closes #500)

2026-07-08 03:27:37 -04:00

label-taxonomy.md

feat: lifecycle role/hazard labels and canonical state mapping (#603)

2026-07-10 16:17:31 -04:00

llm-agent-sha.md

docs: LLM-Agent-SHA opaque attribution convention, Phase 0 (#86) (#87)

2026-07-02 14:00:46 -05:00

llm-workflow-runbooks.md

feat: canonical cleanup for stale #332 review decision locks (#594)

2026-07-09 15:18:48 -04:00

mcp-client-registration.md

docs: pin GlitchTip filing orchestrator contract (Closes #153)

2026-07-07 04:27:02 -04:00

mcp-daemon-import-guard.md

fix(guard): pin session-state authority and reject direct-import mutation (#695)

2026-07-13 21:48:28 -04:00

mcp-menu.md

feat: add skip-stale-REQUEST_CHANGES reviewer menu prompt (#482)

2026-07-08 01:47:34 -04:00

mcp-namespace-eof-recovery.md

fix: address PR #587 REQUEST_CHANGES for MCP namespace health (#543)

2026-07-09 18:44:04 -04:00

mcp-namespace-health.md

fix: address PR #587 REQUEST_CHANGES for MCP namespace health (#543)

2026-07-09 18:44:04 -04:00

release-version-sop.md

docs: re-land release version SOP with v1.1.0 audit lessons (#111)

2026-07-03 03:24:26 -04:00

release-workflows.md

docs: fix trailing whitespace and add approved naming for #52

2026-07-01 04:17:30 -04:00

reviewer-handoff-consistency.md

feat: reject contradictory reviewer handoff ledgers (Closes #501)

2026-07-08 03:33:31 -04:00

safety-model.md

docs: forbid improvised commit fallbacks when MCP commit exists (#260)

2026-07-06 14:44:41 -04:00

state-handoff-ledger.md

feat: add canonical state handoff ledger (#494)

2026-07-08 03:14:32 -04:00

tool-boundaries.md

docs: update safety and boundary docs for Jenkins/GlitchTip (#79) (#89)

2026-07-02 14:21:49 -05:00

two-comment-workflow.md

feat: require Controller Handoff plus Thread State Ledger (Closes #507)

2026-07-08 03:47:06 -04:00

webui-deployment.md

feat(webui): auth and deployment boundary (#435)

2026-07-09 11:50:40 -04:00

webui-local-dev.md

test: keep webui CI hermetic offline

2026-07-09 11:59:23 -04:00

workflow-skill-mount.md

feat: mount canonical gitea-workflow skill for Codex and MCP inventory (Closes #551)

2026-07-08 22:43:46 -04:00