coulomb/the-custodian
5
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Verify remaining finding classes and preserve historical publication blockers
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 3s
Details
Reject generated-only commits / generated-commit-guard (push) Successful in 14s
Details

Browse source
This commit is contained in:
codex 2026-11-02 12:18:46 +01:00
parent d95505fab6
commit df7aa88bca
5 changed files with 664 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

56
docs/changes/2026-11-01-scanner-json-digest/remaining-branch-publication-check.json Normal file
View file

@ -0,0 +1,56 @@
{
"captured_at": "2026-11-02T11:18:36.065106+00:00",
"scope": "Exact remote branch names for local histories absent from fetched refs. No branch was pushed or rewritten.",
"rows": [
{
"path": "/home/worsch/rapp-user-engine",
"branch": "refs/heads/backup/wp0004-pre-envstrip",
"tip": "018f79e40e180c5d62890248473b50e98c88db94",
"commits_absent_from_fetched_remote_refs": 4,
"remote_query_returncode": 2,
"remote_branch_tip": null,
"same_named_branch_published": false,
"remote_branch_absent": true
},
{
"path": "/home/worsch/coulomb-social",
"branch": "refs/heads/archive/csoc-t02-before-public-uid-correction-20261102",
"tip": "871e0b11f71019c373750749d71a0643dcdb848e",
"commits_absent_from_fetched_remote_refs": 4,
"remote_query_returncode": 2,
"remote_branch_tip": null,
"same_named_branch_published": false,
"remote_branch_absent": true
},
{
"path": "/home/worsch/coulomb-social",
"branch": "refs/heads/csoc-unpublished-progress-20261027",
"tip": "c6bd899d81257436ab6050891f82f92f47cd8c3b",
"commits_absent_from_fetched_remote_refs": 4,
"remote_query_returncode": 2,
"remote_branch_tip": null,
"same_named_branch_published": false,
"remote_branch_absent": true
},
{
"path": "/home/worsch/rapp-flex-auth-secrets-engine",
"branch": "refs/heads/main",
"tip": "6e1753a379b72e2d0d6fbc62cd7d0468b87d8d22",
"commits_absent_from_fetched_remote_refs": 3,
"remote_query_returncode": 0,
"remote_branch_tip": "7bc817bd2b4440de97382a2330ef3cf68a81832d",
"same_named_branch_published": false,
"remote_branch_absent": false
},
{
"path": "/home/worsch/railiance-apps",
"branch": "refs/heads/custody/cust81-apps-unpublished-r2",
"tip": "6a8a54d609d8c6f9d984d97414ecaadcab1f894c",
"commits_absent_from_fetched_remote_refs": 2,
"remote_query_returncode": 2,
"remote_branch_tip": null,
"same_named_branch_published": false,
"remote_branch_absent": true
}
]
}

549
docs/changes/2026-11-01-scanner-json-digest/remaining-git-object-identities.json Normal file
View file

@ -0,0 +1,549 @@
{
"findings": 45,
"distinct_values": 10,
"verified_findings": 45,
"verified_distinct_values": 10,
"limits": "Object existence proves a Git identity, not that its content or every containing blob is approved for publication.",
"rows": [
{
"path": "docs/changes/netkingdom-target-2026-10-16/access-native-source/b1/manifest-r2.json",
"line": 26,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/access-native-source/b1/manifest.json",
"line": 26,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/access-native-source/b1/owner-source-review-r1.json",
"line": 49,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/access-native-source/b2-b3/actual-python-source/source-dependencies.json",
"line": 19,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/secrets-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/access-native-source/b2-b3/manifest.json",
"line": 43,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/access-native-source/b2-preparation/trusted-positive-path-r1.json",
"line": 36,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/audit-native-admission/manifest-r1.json",
"line": 4,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/audit-native-admission/manifest-r2.json",
"line": 4,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/audit-native-admission/owner-review-r1.json",
"line": 5,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/audit-native-admission/owner-review-r2.json",
"line": 5,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/browser-checker-artifact-next/build-receipt.json",
"line": 3,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/browser-checker-artifact-next/build-receipt.json",
"line": 5,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "tree"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/browser-checker-artifact-next/closure-collection-r1/build-receipt.json",
"line": 3,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/browser-checker-artifact-next/closure-collection-r1/build-receipt.json",
"line": 5,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "tree"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/browser-checker-artifact-next/closure-collection-r2/build-receipt.json",
"line": 3,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/browser-checker-artifact-next/closure-collection-r2/build-receipt.json",
"line": 5,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "tree"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/browser-checker-environment-r2/build-receipt.json",
"line": 3,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/browser-checker-environment-r2/build-receipt.json",
"line": 5,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "tree"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/decision-native-preparation/r2/canonical-build-install-receipt.json",
"line": 3,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/decision-native-preparation/r2/canonical-producer-api-sourcecheck.json",
"line": 2,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/secrets-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/decision-native-preparation/r2/canonical-producer-api-sourcecheck.json",
"line": 3,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/decision-native-preparation/r3/native-cli-admission-r3-full.patch",
"line": 145,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/decision-native-preparation/r3/native-cli-admission-r3-full.patch",
"line": 146,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/secrets-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/decision-native-preparation/r3/native-cli-admission-r3-over-r2.patch",
"line": 40,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/decision-native-preparation/r3/native-cli-admission-r3-over-r2.patch",
"line": 41,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/secrets-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/decision-native-preparation/r4/native-cli-admission-r4-over-r3.patch",
"line": 9,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/decision-native-preparation/r4/native-cli-admission-r4-over-r3.patch",
"line": 10,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/secrets-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/decision-native-preparation/r4/r3-preimages/docs/proposals/native-cli-admission/proposal.json",
"line": 116,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/decision-native-preparation/r4/r3-preimages/docs/proposals/native-cli-admission/proposal.json",
"line": 117,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/secrets-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/decision-trusted-successor/producer-manifest.json",
"line": 43,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/access-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/identity-restore-adapter-next/preparation.json",
"line": 27,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/identity-restore-adapter-next/revisions/r1/preparation.json",
"line": 20,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/identity-restore-adapter-next/revisions/r2/preparation.json",
"line": 23,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/identity-restore-adapter-next/revisions/r3/preparation.json",
"line": 23,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/identity-restore-adapter-next/revisions/r4/preparation.json",
"line": 24,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-16/identity-restore-adapter-next/revisions/r5/preparation.json",
"line": 27,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-17/apps-access-engine-integration-r2/producer-all-result-attempt2.json",
"line": 168,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/secrets-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-17/forgejo-private-input-r1/evidence/chart-source-inventory-original.json",
"line": 4,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-17/forgejo-required-claim-values-r1/source-inventory.json",
"line": 8,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-17/nk48-1.3-owner-review/owner-review-key-cape.json",
"line": 9,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-17/owner-followthrough-publication-r1/public-digest-originals/apps-chart-source-inventory.original.json",
"line": 4,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-17/owner-followthrough-publication-r1/public-digest-originals/key39-current-verification.original.json",
"line": 3,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-18/cust80-source-evidence-publication-r1/original-metadata/producer-race-result.json",
"line": 174,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/secrets-engine",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-18/cust80-source-evidence-publication-r1/original-metadata/public-metadata-derivation.v1.json",
"line": 200,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
},
{
"path": "docs/changes/netkingdom-target-2026-10-18/forgejo-ongoing-identity-r1/baseline.json",
"line": 2,
"matched_value_shape": "lowercase-hex-40",
"verified_object_copies": [
{
"repo": "/home/worsch/key-cape",
"object_type": "commit"
}
],
"object_identity_found": true
}
]
}

39
docs/changes/2026-11-01-scanner-json-digest/remaining-matched-value-shapes.json Normal file
View file

@ -0,0 +1,39 @@
{
"captured_at": "2026-11-02T11:14:06.843436+00:00",
"scope": "Remaining 113 Custodian files under approved revision-5 candidate profile; inspection only, no admission or publication.",
"profile_sha256": "e8ededac85afff19ff3d20dd1e9049d206eb131772ec9aec4ac08b8b81f520e2",
"files": 113,
"findings": 310,
"rules": {
"generic-api-key": 303,
"discord-api-token": 5,
"bitbucket-client-secret": 2
},
"matched_value_shapes": {
"test-sentinel": 1,
"lowercase-hex-64": 253,
"lowercase-hex-40": 45,
"opaque": 7,
"uuid": 4
},
"no_raw_match_or_matched_values_retained": true,
"detailed_value_free_receipt": "/tmp/sync-findings-r5-value-shapes.json",
"detailed_receipt_sha256": "3df2a901b0399bcbb2d30f2254669640c922c4f2cb6b5c3f367d6b3ad741e290",
"confirmed_source_syntax_false_positive": {
"path": "docs/changes/netkingdom-target-2026-10-16/cluster-historical-publication-r1/repo-manager/src/repo_manager/commands/registrar_reconcile.py",
"line": 701,
"evidence": "Parsed AST identifies a _check_primary function call with variable arguments, with no credential literal in the statement."
},
"other_nonhex_findings": {
"fixture_token_sentinel": 1,
"fixture_dictionary_literal_fields": 2,
"patch_values_length_65_under_sha256_prefix": 3,
"markdown_match_not_adjudicated": 1
},
"limits": [
"Hex and UUID shapes do not prove public-data provenance.",
"Existing signed or digest-bound archive originals must remain byte-identical.",
"No blanket hash, UUID, directory, or rule exemption is authorized by this analysis.",
"No content-bound adjudication implementation or native deployment has been performed."
]
}