Record the OnCo baseline pin and reuse audit.

Pin b594d743, typecheck the checkout, and keep the corpus and assets out of this repo. Leave screenshots and the production build open.

Assistant: grok
Assistant-Session: 01a130f1-abfb-7d71-9cd6-a8b75ec7f95a
This commit is contained in:
tegwick 2026-10-12 18:50:21 +02:00
parent e65950a893
commit 2b1706559b
6 changed files with 254 additions and 11 deletions

View file

@ -2,6 +2,7 @@
set -euo pipefail
# This is a research/bootstrap helper, not bundled upstream code.
# Pin commit after manual licensing inspection. Never merge upstream corpus into this repo by default.
# Reviewed pin: research/baseline/ONCO_PIN (b594d7433bf4e408b44215e25e5304696d6f840e as of 2026-10-12).
: "${ONCO_COMMIT:?Set ONCO_COMMIT to a reviewed full Git SHA}"
git clone https://github.com/judegomila/OnCo.git upstream-onco
git -C upstream-onco checkout --detach "$ONCO_COMMIT"