fix(review): 특권 OpenCode PR 소스 격리 by seonghobae · Pull Request #579 · ContextualWisdomLab/.github

Commits on Jul 16, 2026

fix(review): isolate untrusted PR source blobs
seonghobae
committed
61f4389

Commits on Jul 17, 2026

fix(review): bind approvals and isolate Git metadata
seonghobae
committed
9548f66
fix(review): fail closed before Noema credentials
seonghobae
committed
469c9eb
fix(review): trust isolated coverage worktree
seonghobae
committed
9e3508f
feat(review): scope organization queue sweeps
seonghobae
committed
461ddf2
fix(review): close Strix trust-boundary findings
seonghobae
committed
171ba46
Merge remote-tracking branch 'origin/main' into agent/fix-opencode-untrusted-checkout
seonghobae
committed
8702d86
fix(security): fail closed on incomplete Strix scans
seonghobae
committed
448b42d
Merge remote-tracking branch 'origin/main' into agent/fix-opencode-untrusted-checkout
seonghobae
committed
0496b9c
Merge remote-tracking branch 'origin/main' into agent/fix-opencode-untrusted-checkout
seonghobae
committed
1cd2e86
test(review): prove offline coverage paths
seonghobae
committed
e7e4ffd
test(review): isolate scheduler actor lookup
seonghobae
committed
f538d6d

Commits on Jul 20, 2026

Commits on Jul 22, 2026

fix(review): close privileged execution boundaries
seonghobae
committed
ac73542
fix(ci): close review trust-boundary gaps
seonghobae
committed
ad0d616
fix(ci): harden trusted review execution
seonghobae
committed
099ce24
fix(review): preserve descriptor and SHA identity
seonghobae
committed
674f9ba
fix(review): harden identity and scope contracts
seonghobae
committed
7e3cbcf
fix(ci): harden trusted review tooling
seonghobae
committed
d153584
fix(ci): harden Strix source materialization
seonghobae
committed
746dcbc
fix(ci): anchor review identity evidence
seonghobae
committed
c7b33d2
fix(ci): diff Dependabot lock from merge base
seonghobae
committed
bb55850
test(review): isolate autofix actor lookup
seonghobae
committed
dcc56ac
fix(review): anchor OpenCode base identity
seonghobae
committed
0d66caa
test(ci): cover privileged fail-closed paths
seonghobae
committed
b3bb41b
fix(autofix): require trusted marker actor
seonghobae
committed
6a6e5d4
fix(ci): support coverage artifact reruns
seonghobae
committed
b7fe19c
fix(ci): ignore malformed autofix markers
seonghobae
committed
4d58323

Commits on Jul 26, 2026

merge: refresh OpenCode isolation against main
seonghobae
committed
c9d2871

Navigation Menu

fix(review): 특권 OpenCode PR 소스 격리 - #579

fix(review): 특권 OpenCode PR 소스 격리#579
seonghobae wants to merge 32 commits into
mainfrom
agent/fix-opencode-untrusted-checkout

Commits on Jul 16, 2026

fix(review): isolate untrusted PR source blobs

Commits on Jul 17, 2026

fix(review): bind approvals and isolate Git metadata

fix(review): fail closed before Noema credentials

fix(review): trust isolated coverage worktree

feat(review): scope organization queue sweeps

fix(review): close Strix trust-boundary findings

Merge remote-tracking branch 'origin/main' into agent/fix-opencode-untrusted-checkout

fix(security): fail closed on incomplete Strix scans

Merge remote-tracking branch 'origin/main' into agent/fix-opencode-untrusted-checkout

Merge remote-tracking branch 'origin/main' into agent/fix-opencode-untrusted-checkout

test(review): prove offline coverage paths

test(review): isolate scheduler actor lookup

Commits on Jul 20, 2026

style(review): format materializer regression tests

fix(review): 모델 풀 큐 독점과 형식 재시도 제한

fix(review): bind evidence and pin coverage runners

fix(review): install trusted base Python locks

Commits on Jul 22, 2026

fix(review): close privileged execution boundaries

fix(ci): close review trust-boundary gaps

fix(ci): harden trusted review execution

fix(review): preserve descriptor and SHA identity

fix(review): harden identity and scope contracts

fix(ci): harden trusted review tooling

fix(ci): harden Strix source materialization

fix(ci): anchor review identity evidence

fix(ci): diff Dependabot lock from merge base

test(review): isolate autofix actor lookup

fix(review): anchor OpenCode base identity

test(ci): cover privileged fail-closed paths

fix(autofix): require trusted marker actor

fix(ci): support coverage artifact reruns

fix(ci): ignore malformed autofix markers

Commits on Jul 26, 2026

merge: refresh OpenCode isolation against main