develop: add PAT permission guidance and verification - #400

Merged

efraespada merged 53 commits into

Sep 24, 2026

Commits on Sep 20, 2026

develop: add PAT permission guidance and verification
efraespada
committed
61db6ea
Merge remote-tracking branch 'origin/master' into develop
efraespada
committed
185e2cd
develop: close PAT permission coverage gaps
efraespada
committed
be48110
develop: bound unavailable setup inventory reads
efraespada
committed
b0977e7
develop: fail closed on unavailable setup inventory
efraespada
committed
a8ac8f6
develop: scope setup inventory validation
efraespada
committed
021c842
develop: classify setup permission failures safely
efraespada
committed
952b0d8
develop: keep generic forbidden permission probes unverifiable
efraespada
committed
31e0bc7
develop: scope generic forbidden probe handling
efraespada
committed
ff1178b
develop: cover ambiguous permission response failures
efraespada
committed
c06d8ab
develop: review full diffs in bounded partitions
efraespada
committed
726b2c4
develop: close exhaustive Bugbot review findings
efraespada
committed
56094d6
develop: close exhaustive Bugbot edge cases
efraespada
committed
68a5e61
develop: tighten Bugbot boundaries and setup grants
efraespada
committed
f6c5640
develop: close remaining exhaustive review findings
efraespada
committed
e5f19d0

Commits on Sep 21, 2026

develop: align setup permissions and blocked handling
efraespada
committed
e777841
develop: harden setup permission audits
efraespada
committed
be42e7a
develop: cover bound member authorization
efraespada
committed
76ad1f1
develop: resolve setup audit findings
efraespada
committed
a5963de
develop: resolve checks permission probe ref
efraespada
committed
8c30093
develop: align partition test budgets
efraespada
committed
611dd58
develop: harden Bugbot review trust boundaries
efraespada
committed
bba60e6
develop: close remaining Bugbot findings
efraespada
committed
9427433
develop: enforce safe setup automation examples
efraespada
committed
a6b2021
develop: close exhaustive Bugbot review findings
efraespada
committed
49ab840
develop: fail closed on setup inventory and bound Bugbot raw diffs
efraespada
committed
b17eac7
develop: reconcile public PAT reads and fail closed on setup inspection
efraespada
committed
898a210
develop: scope workflow PAT grants to enabled capabilities
efraespada
committed
10874b8
develop: assign unavailable patches and correct PAT guidance
efraespada
committed
423734f
develop: distinguish PAT Contents probe from workflow visibility
efraespada
committed
714fac4
develop: cover standalone members-only actions and harden PAT guidance
efraespada
committed
1fedfb0
develop: block denied audits and inspect credential health on selected ref
efraespada
committed
65ce9be
develop: make example PAT grants conditional
efraespada
committed
5e4751f
develop: reject malformed workflow Contents evidence
efraespada
committed
7786491
develop: validate exhaustive review and workflow visibility inputs
efraespada
committed
24f3490
develop: preserve verbatim Bugbot fragments and gate active tasks
efraespada
committed
edec58a

Commits on Sep 23, 2026

Commits on Sep 24, 2026