Repository navigation

fix(review): integrate orchestrated OpenCode and Noema repairs - #2414

Merged

seonghobae merged 48 commits into

mainfrom

fix/orchestrated-review-integration

Sep 27, 2026

Merged

fix(review): integrate orchestrated OpenCode and Noema repairs#2414
seonghobae merged 48 commits into
mainfrom
fix/orchestrated-review-integration

Commits on Sep 18, 2026
- fix(security): allowlist https://api.github.com before urllib urlopen
  
  seonghobae
  and
  cursoragent
  committed
  a83d6d3
- test(security): pin GitHub API redirect credential boundary
  seonghobae
  committed
  225260a
- fix(security): contain GitHub API redirects to admitted origin
  seonghobae
  committed
  0ae2204
- test(security): pin Strix redirect credential boundary
  seonghobae
  committed
  062663a
- fix(security): contain Strix GitHub API redirects
  seonghobae
  committed
  2708a6b
- chore(deps): bump anyio from 4.14.0 to 4.14.2
  dependabot[bot]
  authored
  3758b89
Commits on Sep 19, 2026
- test(security): align Strix transport seam with dedicated opener
  seonghobae
  committed
  4dcd25c
- test(security): bind authenticated openers at owned seams
  seonghobae
  committed
  834d285
- merge(security): carry #2269 urllib GitHub API opener into #2278
  seonghobae
  committed
  6d10002
- chore(deps): isolate AnyIO security owner delta
  seonghobae
  committed
  545648e
- merge: carry AnyIO lock update onto protected owner
  seonghobae
  committed
  c51c8d2
- fix(opencode): materialize every coverage lock input
  seonghobae
  committed
  e43a75b
- docs(gap): bind coverage repair to canonical PR
  seonghobae
  committed
  c4a73a1
Commits on Sep 20, 2026
- fix(deps): restore AnyIO owner isolation
  seonghobae
  committed
  8a5251b
Commits on Sep 21, 2026
- fix(review): point OpenCode at the gateway's /v1 routes and split failure classes
  
  seonghobae
  and
  claude
  committed
  124f64a
- test(review): repin gateway baseURL contracts and the dispatch blob digest
  
  seonghobae
  and
  claude
  committed
  e8e2deb
- test(strix): repin the quick-gate baseURL assertions to the served /v1 route
  
  seonghobae
  and
  claude
  committed
  bc9ce17
- test(opencode): execute the gateway route instead of only parsing the config
  
  seonghobae
  and
  claude
  committed
  9c6d053
Commits on Sep 23, 2026
- repair(codeql): restore exact endpoint-set assertion
  seonghobae
  committed
  657d104
- chore(foundation): converge dependency and CodeQL repairs
  seonghobae
  committed
  f1a8dc8
Commits on Sep 24, 2026
- fix(opencode): adopt AnyIO security prerequisite
  seonghobae
  committed
  42e4198
- fix(test-gate): restore full branch coverage
  seonghobae
  committed
  38cfcae
- test(queue-health): scope permission assertion to workflow token
  seonghobae
  committed
  21247ef
- test(queue-health): isolate collector edge cases
  seonghobae
  committed
  57c168b
- fix(opencode): vendor all base Cargo lock roots
  seonghobae
  committed
  2e79155
- repair(foundation): converge CodeQL endpoint contract into coverage owner
  seonghobae
  committed
  f229816
Commits on Sep 25, 2026
- fix(security): update AnyIO lock for audit gate
  seonghobae
  committed
  3b3ce16
Commits on Sep 26, 2026
- fix(codeql): unblock CodeQL scan dispatch for all .github PRs
  seonghobae
  committed
  14fe2b6
- repair(foundation): converge coverage, dependency, and CodeQL owners
  seonghobae
  committed
  950ab88
- fix(ci): bind AnyIO security pin to Strix input
  seonghobae
  committed
  8e1aba9
- fix(noema): dispatch capacity retries with scoped write token
  seonghobae
  committed
  33b9028
- Merge foundation owner into Cargo materializer repair
  seonghobae
  committed
  4e29c11
- test: remove dead Cargo root probe
  seonghobae
  committed
  9fb9097
- test(ci): reject escaping Cargo target paths
  seonghobae
  committed
  93a8e08
- fix(ci): confine Cargo placeholder targets
  seonghobae
  committed
  00b9e25
- test(rust): keep mock materializer coverage toolchain-independent
  seonghobae
  committed
  fc9c8d2
Commits on Sep 27, 2026
- test(queue): reject scalar broad permissions
  seonghobae
  committed
  871b662
- test(queue-health): pin exact read-only token permissions
  seonghobae
  committed
  372f5b8
- fix(review): validate readiness beyond pending provider probes
  seonghobae
  committed
  c3934de
- merge(deps): carry canonical AnyIO security fix from #2278
  seonghobae
  committed
  4ebadfc
- docs(governance): distinguish restored CodeQL from retired entrypoint
  seonghobae
  committed
  e7c2d0a
- Merge canonical review bootstrap prerequisites
  seonghobae
  committed
  081453f
- Merge canonical OpenCode orchestrator gateway routing
  seonghobae
  committed
  e20d6e2
- Merge canonical Noema continuation dispatch authority
  seonghobae
  committed
  e0855c8
- Merge canonical OpenCode Cargo workspace vendoring
  seonghobae
  committed
  cae61aa
- Merge validated concurrent review readiness
  seonghobae
  committed
  392de7a
- fix(ci): avoid duplicate full-suite review quality execution
  seonghobae
  committed
  47444d5
- Merge deployed dedicated central runner routing
  seonghobae
  committed
  c63413a

Commits

Commits on Sep 18, 2026

Commits on Sep 19, 2026

Commits on Sep 20, 2026

Commits on Sep 21, 2026

Commits on Sep 23, 2026

Commits on Sep 24, 2026

Commits on Sep 25, 2026

Commits on Sep 26, 2026

Commits on Sep 27, 2026