Four supply chain gates, and one of them turned out to already exist - #1

Merged

donislawdev merged 11 commits into

mainfrom

ci/supply-chain-gates

Sep 22, 2026

Commits on Sep 22, 2026

ci: four supply chain gates, and one of them turned out to already exist

donislawdev
and
claude
committed
0819d79
fix: the dependency submission has never once succeeded, and one property is why

donislawdev
and
claude
committed
b9aa7fa
ci: pin the actions under guard, stop building a branch three times, and let the instrument be dispatched on its own

donislawdev
and
claude
committed
3f4d480
ci: move code scanning out of a dialog and into a file, changing nothing it looks for

donislawdev
and
claude
committed
ca94d1e
fix: four holes a review found in the new gates, and three more the documentation it cited revealed

donislawdev
and
claude
committed
3a7f6fd
feat: build both executables on request and hand them back

donislawdev
and
claude
committed
0d9ce99
fix: close the three licence routes nothing was watching, and the injection the new gate found in the new workflow

donislawdev
and
claude
committed
328c0d5
fix: four more from a second review, and two of them are the same mistake this branch keeps making

donislawdev
and
claude
committed
5eee466
fix: a Python bytecode file was committed and nothing noticed

donislawdev
and
claude
committed
875e3ce
fix: the licence gate saw the real dependency graph for the first time and asked four fair questions

donislawdev
and
claude
committed
04fc972
fix: seven more from a third review, including a table this branch broke in a file the world reads

donislawdev
and
claude
committed
0552661