fix: content pipeline hardening and access constraints - #1
Merged
Conversation
Payload's draft query param does not hide drafts; open read ACL leaked staged content over REST.
runLevelsEngine no longer applies a second −2 while the miss remains in-window.
Lets content-monitor compare CMS docs against the current positioning hash.
Avoid silently truncating the weekly invariant check at 200 docs per collection.
A hand-edited queue.yaml without cap no longer disables the promotion gate.
Keep the local/dev fallback; fail closed if production boots without a secret.
support-triage is planned not registered; R11/R12 are enforced; tasks status matches the library.
…uration interfaces
Content QAGate run failed before producing a report — see the workflow logs. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
PAYLOAD_SECRETin productionTest plan
gates(content-qa) passes on this PRmain)