All pull requests

Pull requests

• fix(ci): stage fail-closed fast-mlsirm native producer and terminal gate seam

  #2667·seonghobae opened Oct 27, 2026Contributor·

  ·
  11

• fix(codeql): direct SARIF publication with fsync custody (activation HOLD)

  #2666·seonghobae opened Oct 26, 2026Contributor·

  ·
  1

• feat(security): publish reviewed socketless scanner source tooling

  #2665·seonghobae opened Oct 26, 2026Contributor·

  ·
  5

• fix(security): isolate scanner Python from PR checkout code

  #2664·seonghobae opened Oct 26, 2026Contributor·

  ·
  4

• fix(strix): minimal trusted workspace isolation prerequisite

  #2663·seonghobae opened Oct 26, 2026Contributor·

  ·
  9

• fix(noema): bounded complete serializer prerequisite

  #2662·seonghobae opened Oct 25, 2026Contributor·

  ·
  2

• fix(noema): stage reviewed exact-file canary route

  #2661·seonghobae opened Oct 25, 2026Contributor·

  ·
  18

• ci: add trusted shared-worker runtime observation gate

  #2660·seonghobae opened Oct 25, 2026Contributor·

  ·
  1

• fix(strix): use exclusively owned trusted workspaces

  #2658·seonghobae opened Oct 15, 2026Contributor·

  ·
  2

• fix(codeql): resolve live base identity from authenticated branch refs

  #2657·seonghobae opened Oct 15, 2026Contributor·

  ·
  2

• ci(noema): stage self-hosted reviewer quality supplier

  #2656·seonghobae opened Oct 15, 2026Contributor·

  ·
  1

• fix(queue-health): preserve runner routing observations

  #2655·seonghobae opened Oct 15, 2026Contributor·

  ·
  2

• fix(ci): pin auto-rebase checkout to the called workflow SHA

  #2654·seonghobae opened Oct 15, 2026Contributor·

  ·
  4

• Count root-reserved space for the OpenCode coverage image apt fetch

  #2653·seonghobae opened Oct 15, 2026Contributor·

  ·
  2

• ci: add validated reusable central security ingress

  #2651·seonghobae opened Oct 14, 2026Contributor·

  ·
  2

• fix(noema): reject truncated-diff approvals

  #2650·seonghobae opened Oct 14, 2026Contributor·

  ·
  2

• fix(ci): backport pinned gh bootstrap to package stack

  #2649·seonghobae opened Oct 14, 2026Contributor·

  ·
  2

• fix(ci): bind QSR coverage evidence to each run

  #2648·seonghobae opened Oct 14, 2026Contributor·

  ·
  2

• ci(fast-mlsirm): bind ndk-sys rights evidence to fixed release gate

  #2647·seonghobae opened Oct 13, 2026Contributor·

  ·
  2

• ci(naruon): add fixed isolated reusable CI suppliers

  #2642·seonghobae opened Oct 13, 2026Contributor·

  ·
  9

• ci(policyweave): centralize quality on isolated self-hosted runners

  #2640·seonghobae opened Oct 13, 2026Contributor·

  ·
  4

• ci: add isolated contextual-orchestrator security supplier

  #2634·seonghobae opened Oct 13, 2026Contributor·

  ·
  7

• fix(review): register CalendarWeave central dispatch target

  #2633·seonghobae opened Oct 13, 2026Contributor·

  ·
  1

• ⚡ Bolt: 정규식 기반 공백 정규화 성능 최적화

  #2623·seonghobae opened Oct 11, 2026Contributor·

  ·
  6

• feat(review): route public reviews through LiteLLM auto

  #2621·seonghobae opened Oct 10, 2026Contributor·

  ·
  6