[workflow-audit] 8 unexplained change(s) on 2026-09-23 #763

8 unexplained commit(s) in the audit window (.github/workflows/ .config/tend.yaml .github/audit/ .vscode/) since 2026-09-22T12:33:14Z.

Routine Renovate pin bumps and reproducible tend regenerations are
classified and omitted — see the run summary for what was skipped.
Everything below needs a human to account for it.

08839cd — Audit a promoted obligation as written, and name UNVERIFIABLE for failed calls

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 22:03:41 -0700
• Refs: remotes/origin/audit-external-obligations
• Files:
  • .github/audit/_preamble.md
• View diff

2ab4ad9 — Key the rule on what no audit run can read, and keep Future for unbuilt work

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 21:41:54 -0700
• Refs: remotes/origin/audit-external-obligations
• Files:
  • .github/audit/_preamble.md
• View diff

52eabbd — Restate the unreadable-condition rule as a list of dispositions

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 21:57:56 -0700
• Refs: remotes/origin/audit-external-obligations
• Files:
  • .github/audit/_preamble.md
• View diff

570e329 — Stage Hosted production activation under Future so it cannot hold the audit inconclusive

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 20:36:38 -0700
• Refs: main,remotes/origin/audit-external-obligations remotes/origin/fix/theme-store-stale-error,remotes/origin/main remotes/origin/renovate/cargo,remotes/origin/tend/update-workflows remotes/origin/ws-autoname-2
• Files:
  • .github/audit/hosted.md
• View diff

b18b675 — Keep the in-repo preflight gate audited; stage only what needs provisioning

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 20:46:24 -0700
• Refs: main,remotes/origin/audit-external-obligations remotes/origin/fix/theme-store-stale-error,remotes/origin/main remotes/origin/renovate/cargo,remotes/origin/tend/update-workflows remotes/origin/ws-autoname-2
• Files:
  • .github/audit/hosted.md
• View diff

b6e248e — Stage external obligations under Future, matching #757

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 21:34:32 -0700
• Refs: remotes/origin/audit-external-obligations
• Files:
  • .github/audit/_preamble.md
• View diff

dd8d9c3 — Name all three dispositions of an unreadable obligation in the preamble

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 21:50:48 -0700
• Refs: remotes/origin/audit-external-obligations
• Files:
  • .github/audit/_preamble.md
  • .github/audit/hosted.md
• View diff

f27c5e1 — Split Hosted accounts into a fourth audit domain

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 16:40:38 -0700
• Refs: main,remotes/origin/audit-external-obligations remotes/origin/fix/theme-store-stale-error,remotes/origin/main remotes/origin/renovate/cargo,remotes/origin/tend/update-workflows remotes/origin/ws-autoname-2
• Files:
  • .github/audit/application-security.md
  • .github/audit/hosted.md
  • .github/audit/orchestrator.md
  • .github/workflows/security-audit.yaml
• View diff