Repository navigation

fix(actions_lock): repair the RSR oracle compile failure and pin the consumer interface - #956

Merged

hyperpolymath merged 22 commits into

mainfrom

arena/0cc4e3dd-hypatia

Oct 25, 2026

Merged

fix(actions_lock): repair the RSR oracle compile failure and pin the consumer interface#956
hyperpolymath merged 22 commits into
mainfrom
arena/0cc4e3dd-hypatia

Commits on Oct 25, 2026
- fix(actions_lock): compile the module again, and fix the two defects behind it
  
  Arena Agent
  and
  arena-agent
  committed
  a5d603a
- ci(oracle): gate the Elixir tree on the dogfood toolchain, and pin the interface
  
  Arena Agent
  and
  arena-agent
  committed
  ab3fba3
- docs(index): link the consumer page from docs/README.adoc
  
  Arena Agent
  and
  arena-agent
  committed
  3d9d587
- fix(actions_lock): treat an omitted hostname and explicit github.com as one host
  
  Arena Agent
  and
  arena-agent
  committed
  c5a127f
- fix(rsr-oracle): refuse branch pins, score only the caller's tree, keep gate output
  
  Arena Agent
  and
  arena-agent
  committed
  46760a7
- ci(tmp): verify pin refusal, missing target, and gate output capture
  
  Arena Agent
  and
  arena-agent
  committed
  b6b3b1c
- fix(rsr-oracle): score a subdirectory checkout so helper checkouts stay outside it
  
  Arena Agent
  and
  arena-agent
  committed
  cd1fdfe
- fix(rsr-oracle): allow same-repo calls when checking the pin
  
  Arena Agent
  and
  arena-agent
  committed
  1a585cb
- ci(tmp): verify caller-visible outputs and the pin decision table
  
  Arena Agent
  and
  arena-agent
  committed
  d04d986
- ci(tmp): make the verification self-asserting via annotations
  
  Arena Agent
  and
  arena-agent
  committed
  94e8bba
- chore(ci): remove the verification harness
  
  Arena Agent
  and
  arena-agent
  committed
  b5ccac0
- test(actions_lock): one coherent identity-scope test for the normalised host
  
  Arena Agent
  and
  arena-agent
  committed
  7c40fce
- test(actions_lock): derive the implicit-host case from the disagreeing lock
  
  Arena Agent
  and
  arena-agent
  committed
  ccac35f
- fix(rsr-oracle): clear the seven CodeQL alerts the new workflow raised
  
  Arena Agent
  and
  arena-agent
  committed
  0a885d0
- Potential fix for pull request finding 'CodeQL / Checkout of untrusted code in a non-privileged context'
  
  hyperpolymath
  and
  github-advanced-security[bot]
  authored
  5a21edf
- Potential fix for pull request finding 'CodeQL / Checkout of untrusted code in a non-privileged context'
  
  hyperpolymath
  and
  github-advanced-security[bot]
  authored
  9bc8535
- fix(ci): disable checkout credentials and clarify lockfile host docs
  coderabbitai[bot]
  committed
  74b1804
- fix(rsr-oracle): default the scored ref to github.sha, not the PR head
  
  Arena Agent
  and
  arena-agent
  committed
  d1f652d
- fix(rsr-oracle): repair the two Copilot autofixes
  
  Arena Agent
  and
  arena-agent
  committed
  47c096c
- chore(deps): update Tokio, ctutils, and WebPKI dependencies
  coderabbitai[bot]
  committed
  f27e12f
- Potential fix for pull request finding 'CodeQL / Checkout of untrusted code in a non-privileged context'
  
  hyperpolymath
  and
  github-advanced-security[bot]
  authored
  e268a52
- Merge branch 'main' into arena/0cc4e3dd-hypatia
  hyperpolymath
  authored
  d73f76b

Commits

Commits on Oct 25, 2026