coulomb/railiance-forge
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

security: reconcile receive scanner activation and remaining native gates
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2
This commit is contained in:
tegwick 2026-10-13 13:00:27 +02:00
parent d805b00c95
commit d2d87cad51
1 changed files with 16 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

18
workplans/FORGE-WP-0006-independent-secret-detection.md
View file

@ -8,7 +8,7 @@ status: active
owner: codex
topic_slug: railiance
created: "2026-10-12"
updated: "2026-10-12"
updated: "2026-10-13"
flavor: implementation
depends_on: []
state_hub_workstream_id: "69458fdc-d727-5391-b88b-d03da0afe24e"
@ -57,7 +57,7 @@ status does not count as a successful secret-detection test.
```task
id: FORGE-WP-0006-T02
status: todo
status: progress
priority: high
state_hub_task_id: "210e7935-944a-5720-b356-18b48a68aa5e"
```
@ -72,6 +72,20 @@ unavailable-scanner refusal, quarantine cleanup, unchanged authorization and
other hook behavior. Native acceptance must include SSH/HTTP/frontend creation
and merge paths plus restart/hook regeneration. Keep a missing proof open.
2026-10-13 recovered activation: exact binaries were admitted by the October 12
isolated native probe and then installed with additive hooks on the 22 reviewed
repositories under FORGE6-RECEIVE-ACTIVATION-001. The actual SSH clean/secret probes
passed their respective scanner-result checks under a temporary independent veto;
refs and rejected quarantined commits were absent, the veto was removed and
health remained passing. A fresh October 13 read-only recheck confirms the same
pod/image, exact installed binaries and all hook hashes, with original hooks
preserved. Custodian receipts: `docs/evidence/2026-10-12-netkingdom-security/receive-hook-activation.json`
and `docs/evidence/2026-10-13-netkingdom-security/receive-profile-recheck.json`.
Metadata now reconciles 165 database repositories to 165 directories; 143 remain
outside this activation. T02 stays progress: ordinary clean acceptance,
HTTP/frontend writes, restart/regeneration and new-repository reconciliation
remain native acceptance gates. No full coverage or owner approval is inferred.
## Verify CI independence, detection response and complete coverage
```task