ci: require adversarial high-risk regression gates - #420

Closed

leehack wants to merge 41 commits into

mainfrom

fix/issue-419-regression-gate

Commits on Aug 22, 2026

ci: require adversarial high-risk regression evidence
leehack
committed
0860bef
Merge remote-tracking branch 'origin/main' into fix/issue-419-regression-gate
leehack
committed
6baf6de
ci: require high-risk branches current with main
leehack
committed
16025a3
docs: define post-merge P1 recovery stop
leehack
committed
2d6ae70
fix: classify only production template paths
leehack
committed
96c256d
ci: avoid package hooks in regression gate
leehack
committed
c41b5d4
ci: trust base policy for regression gates
leehack
committed
597f928
docs: require strict high-risk base checks
leehack
committed
e150144
fix: redact untrusted gate diagnostics
leehack
committed
224d83f
fix: bind high-risk QA to exact-head approval
leehack
committed
069ed55
fix: fail closed while trusted QA reruns
leehack
committed
2561688
fix: revalidate trusted gate on reviews
leehack
committed
4de8701
fix: reject moving trusted PR snapshots
leehack
committed
34af5ff
fix: harden trusted workflow inputs
leehack
committed
526bb7b
fix: revoke stale QA attestations
leehack
committed
ea930cd
fix: harden trusted review revalidation
leehack
committed
7ac8880
fix: bind exact regression evidence paths
leehack
committed
d8b21a5
fix: revoke failed CI and untrusted reviews
leehack
committed
2910653
fix: close trusted regression gate blockers
leehack
committed
cb182a0
fix: harden regression gate dependencies
leehack
committed
caa4579
fix: close trusted parity evidence gaps
leehack
committed
d5534d4

Commits on Aug 23, 2026

fix: harden final gate revalidation
leehack
committed
edbd861
fix: enforce visible PR evidence fields
leehack
committed
7456434
fix: bind structured regression evidence
leehack
committed
fdc9388
fix: bind trusted CI provenance
leehack
committed
bacb0ea
test: make parity environment probe portable
leehack
committed
7e3b338
fix: isolate upstream parity process group
leehack
committed
67e0d9e
fix: bound upstream parity build jobs
leehack
committed
076fd09
test: accept portable failure exit codes
leehack
committed
b399217
fix: order exact-head CI runs monotonically
leehack
committed
623cc59
test: capture portable script diagnostics
leehack
committed
95632f9
test: locate GNU Bash on Windows
leehack
committed
66723d7
fix: close trusted revalidation gaps
leehack
committed
0497d25
Merge origin/main into fix/issue-419-regression-gate
leehack
committed
7f8be47
fix: secure high-risk gate publication
leehack
committed
fdb9a2d
fix: serialize high-risk publisher fallbacks
leehack
committed
10e3df5
fix: preserve fork review revalidation
leehack
committed
d5bd5b9
fix: keep active publisher ownership authoritative
leehack
committed
19185c8
fix: bind high-risk evidence to canonical QA
leehack
committed
eaf3d41
Merge remote-tracking branch 'origin/main' into fix/issue-419-regression-gate-reconcile
leehack
committed
161b8df

Commits on Aug 24, 2026

Merge remote-tracking branch 'origin/main' into fix/issue-419-regression-gate-reconcile
leehack
committed
4457f71