feat: v6.3.0 pipeline hardening — auth/authz bug-class, pr-monitoring pattern, completion trust-boundary, hook stdout-JSON discipline, reminder dedup (#41/#58/#59/#60/#61) by intel352 · Pull Request #62 · GoCodeAlone/autonomous-dev-kit

docs: design + ADR 0003 for v6.3.0 pipeline hardening (#41/#58/#59/#60)

Jon Langevin

committed

docs: revise v6.3.0 design per adversarial cycle 1 (C1 JSON-extract + I1/I2/I3 + m1/m2/m3) + add #61 reminder dedup

Jon Langevin

committed

docs: revise v6.3.0 design per adversarial cycle 2 (I-NEW-1 pre-compact clear placement before early-exit)

Jon Langevin

committed

docs: v6.3.0 design PASS adversarial cycle-3 (converged; empty-session_key guard)

Jon Langevin

committed

docs: implementation plan for v6.3.0 pipeline hardening (#41/#58/#59/#60/#61)

Jon Langevin

committed

docs: revise v6.3.0 plan per adversarial plan-phase (I1 quote-strip + I2 jq-absent test + I3 trap/no-transcript + m1)

Jon Langevin

committed

docs: plan PASS adversarial plan-phase cycle-2 (converged; sed-order mirrors pre-tool-scope-guard)

Jon Langevin

committed

chore: lock scope for v6.3.0 pipeline hardening (alignment passed)

Jon Langevin

committed

feat(adversarial-design-review): add auth/authz chain-composition plan-phase bug-class (#59)

Jon Langevin

committed

docs(pr-monitoring): sanction the bash poll-loop CI-wait pattern, host-scoped (#60)

Jon Langevin

committed

docs(subagent-driven-development): completion trust-boundary for Implement-N (#58, ADR 0003)

Jon Langevin

committed

fix(run-hook.cmd): enforce stdout JSON discipline, recover block decisions behind warnings (#41)

Jon Langevin

committed

fix(hooks): pr-review reminder once-per-session + PreCompact reset (#61)

Jon Langevin

committed

ci: run hook contract + stdout-discipline tests on hooks/tests changes (#41/#61)

Jon Langevin

committed

chore: bump version to 6.3.0 (#41/#58/#59/#60/#61)

Jon Langevin

committed

fix(hooks): grep -vxF full-line diagnostic routing + atomic marker rewrite (PR review)

Jon Langevin

committed

feat(adversarial-design-review): add Artifact-class precedent design-phase bug-class (#63)

Jon Langevin

committed

fix(session-start): GNU stat -c %Y before BSD -f %m for Linux time-dedup + re-enable hook-contracts CI (#64)

Jon Langevin

committed

chore: amend v6.3.0 scope — fold in #63 (artifact-class precedent) + #64 (session-start Linux stat), user-approved (ADR 0004)

Jon Langevin

committed

docs: add #63 + #64 to v6.3.0 release notes

Jon Langevin

committed

ci(hooks-check): add explicit permissions block + workflow-self path filter on PR (Copilot/CodeQL review)

Jon Langevin

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: v6.3.0 pipeline hardening — auth/authz bug-class, pr-monitoring pattern, completion trust-boundary, hook stdout-JSON discipline, reminder dedup (#41/#58/#59/#60/#61)#62

feat: v6.3.0 pipeline hardening — auth/authz bug-class, pr-monitoring pattern, completion trust-boundary, hook stdout-JSON discipline, reminder dedup (#41/#58/#59/#60/#61)#62
intel352 merged 21 commits into
mainfrom
feat/pipeline-hardening-4issues-v6.3.0

Commits on Jun 1, 2026

docs: design + ADR 0003 for v6.3.0 pipeline hardening (#41/#58/#59/#60)

docs: revise v6.3.0 design per adversarial cycle 1 (C1 JSON-extract + I1/I2/I3 + m1/m2/m3) + add #61 reminder dedup

docs: revise v6.3.0 design per adversarial cycle 2 (I-NEW-1 pre-compact clear placement before early-exit)

docs: v6.3.0 design PASS adversarial cycle-3 (converged; empty-session_key guard)

docs: implementation plan for v6.3.0 pipeline hardening (#41/#58/#59/#60/#61)

docs: revise v6.3.0 plan per adversarial plan-phase (I1 quote-strip + I2 jq-absent test + I3 trap/no-transcript + m1)

docs: plan PASS adversarial plan-phase cycle-2 (converged; sed-order mirrors pre-tool-scope-guard)

chore: lock scope for v6.3.0 pipeline hardening (alignment passed)

feat(adversarial-design-review): add auth/authz chain-composition plan-phase bug-class (#59)

docs(pr-monitoring): sanction the bash poll-loop CI-wait pattern, host-scoped (#60)

docs(subagent-driven-development): completion trust-boundary for Implement-N (#58, ADR 0003)

fix(run-hook.cmd): enforce stdout JSON discipline, recover block decisions behind warnings (#41)

fix(hooks): pr-review reminder once-per-session + PreCompact reset (#61)

ci: run hook contract + stdout-discipline tests on hooks/tests changes (#41/#61)

chore: bump version to 6.3.0 (#41/#58/#59/#60/#61)

fix(hooks): grep -vxF full-line diagnostic routing + atomic marker rewrite (PR review)

feat(adversarial-design-review): add Artifact-class precedent design-phase bug-class (#63)

fix(session-start): GNU stat -c %Y before BSD -f %m for Linux time-dedup + re-enable hook-contracts CI (#64)

chore: amend v6.3.0 scope — fold in #63 (artifact-class precedent) + #64 (session-start Linux stat), user-approved (ADR 0004)

docs: add #63 + #64 to v6.3.0 release notes

ci(hooks-check): add explicit permissions block + workflow-self path filter on PR (Copilot/CodeQL review)