ci: harden GitHub release authority and repository hygiene - #2

Open

STELS37 wants to merge 24 commits into

mainfrom

chore/github-hardening-20260927

Commits on Sep 27, 2026

fix: clean route correctness lint
STELS37
committed
1e99253
fix: clean SSE transport imports
STELS37
committed
243f831
fix: clean auth middleware imports
STELS37
committed
108b496
fix: clean OAuth imports
STELS37
committed
f5c3b7c
fix: clean application imports
STELS37
committed
44ef9a2
fix: tighten direct operations lint
STELS37
committed
6528423
fix: clean executor import
STELS37
committed
d390fc8
fix: clean extra tools import
STELS37
committed
9e5e099
fix: clean MCP tool runner lint
STELS37
committed
c72e2f9
fix: clean remote SSH import
STELS37
committed
55fc43e
fix: clean SSH client correctness lint
STELS37
committed
cfaacb0
build: freeze Ruff correctness policy
STELS37
committed
5a2fd9c
ci: gate production deploy on verified exact commit
STELS37
committed
0937e28
ci: make secondary deploy path manual only
STELS37
committed
166623c
ci: centralize production deployment verification
STELS37
committed
6e8a873
chore: prevent repository-local scratch and backup archives
STELS37
committed
8e884c1
docs: define security and deployment policy
STELS37
committed
02b9e62
chore: remove tracked scratch file tmp.txt
STELS37
committed
5bf9736
chore: remove tracked scratch file test_write.txt
STELS37
committed
7684de8
build: keep lint gate correctness-focused
STELS37
committed
08fc9c6
ci: isolate import smoke from production SSH secrets
STELS37
committed
10e7353
test: make settings hermetic without production secrets
STELS37
committed
8a0e282
test: isolate direct operation contracts from runner host
STELS37
committed
c4a55bb
chore: remove stale public repository backup archive
STELS37
committed
64658c4

Navigation Menu

ci: harden GitHub release authority and repository hygiene - #2

ci: harden GitHub release authority and repository hygiene#2
STELS37 wants to merge 24 commits into
mainfrom
chore/github-hardening-20260927

Commits on Sep 27, 2026

fix: clean route correctness lint

fix: clean SSE transport imports

fix: clean auth middleware imports

fix: clean OAuth imports

fix: clean application imports

fix: tighten direct operations lint

fix: clean executor import

fix: clean extra tools import

fix: clean MCP tool runner lint

fix: clean remote SSH import

fix: clean SSH client correctness lint

build: freeze Ruff correctness policy

ci: gate production deploy on verified exact commit

ci: make secondary deploy path manual only

ci: centralize production deployment verification

chore: prevent repository-local scratch and backup archives

docs: define security and deployment policy

chore: remove tracked scratch file tmp.txt

chore: remove tracked scratch file test_write.txt

build: keep lint gate correctness-focused

ci: isolate import smoke from production SSH secrets

test: make settings hermetic without production secrets

test: isolate direct operation contracts from runner host

chore: remove stale public repository backup archive