Issues

gate-5 (route-auth) is satisfied by a COMMENT mentioning the attribute — a false-negative vector in a security gate

#196

· rubenvdlinde opened

on Aug 6, 2026

quality.yml: gating the test tier on the security tier silently deletes all test evidence (CVE-2026-67434 disabled PHPUnit/Newman/E2E fleet-wide today)

#194

· rubenvdlinde opened

on Aug 6, 2026

A failing playwright-seed-command silently skips its && tail, exits 0, and prints 'Seed command completed.' — Playwright then tests an unseeded instance

#192

· rubenvdlinde opened

on Aug 6, 2026

gate-48 csrf-cochange matches a REMOVED COMMENT — nldesign is red for a docblock that only names the attribute

#191

· rubenvdlinde opened

on Aug 6, 2026

E2E is not a required check anywhere: 0 of 20 fleet repos gate on Playwright, and 17 have no branch protection at all

#190

· rubenvdlinde opened

on Aug 6, 2026

playwright-coverage-threshold has never gated: warning-only, not line coverage, and zero scenarios scores 100%

#189

· rubenvdlinde opened

on Aug 6, 2026

Playwright instrument: 2 repos write zero traces (retries:0 + on-first-retry), and no repo in the fleet sets globalTimeout

#188

· rubenvdlinde opened

on Aug 6, 2026

hydra-gates exits 99 on a push to the branch it auto-detects as base — mainline runs gate nothing

#183

· rubenvdlinde opened

on Aug 6, 2026

gate-28 license-triangle blocks every frontend-only PR in a PHP repo: subject-exists is judged from the REPO, scope from the DIFF

#178

· rubenvdlinde opened

on Aug 6, 2026

hydra-gates: 3 gates (4, 24, 33) never report, and require-full-coverage now makes that fatal fleet-wide

#169

· rubenvdlinde opened

on Aug 5, 2026

Re-land #161 (axe scoping) in a form GitHub can resolve — and add a startup-failure canary

#167

· rubenvdlinde opened

on Aug 5, 2026

Hydra Gates reports SUCCESS having judged 0 files on every push to a repo's own default branch

#163

· rubenvdlinde opened

on Aug 5, 2026

Navigation Menu

Uh oh!

All issues

gate-5 (route-auth) is satisfied by a COMMENT mentioning the attribute — a false-negative vector in a security gate

quality.yml: gating the test tier on the security tier silently deletes all test evidence (CVE-2026-67434 disabled PHPUnit/Newman/E2E fleet-wide today)

A failing playwright-seed-command silently skips its && tail, exits 0, and prints 'Seed command completed.' — Playwright then tests an unseeded instance

gate-48 csrf-cochange matches a REMOVED COMMENT — nldesign is red for a docblock that only names the attribute

E2E is not a required check anywhere: 0 of 20 fleet repos gate on Playwright, and 17 have no branch protection at all

playwright-coverage-threshold has never gated: warning-only, not line coverage, and zero scenarios scores 100%

Playwright instrument: 2 repos write zero traces (retries:0 + on-first-retry), and no repo in the fleet sets globalTimeout

hydra-gates exits 99 on a push to the branch it auto-detects as base — mainline runs gate nothing

gate-28 license-triangle blocks every frontend-only PR in a PHP repo: subject-exists is judged from the REPO, scope from the DIFF

hydra-gates: 3 gates (4, 24, 33) never report, and require-full-coverage now makes that fatal fleet-wide

Re-land #161 (axe scoping) in a form GitHub can resolve — and add a startup-failure canary

Hydra Gates reports SUCCESS having judged 0 files on every push to a repo's own default branch

Uh oh!

Search results