chore: fork-policy guardrails to prevent parity drift - #18
Merged
Conversation
docs: record cold-reader pass (S1+S2 @ ebfd0b1)
Informational mapping doc referenced by scan for cra-baseline packs. Split from distribution sprint for parallel review (PR6). Co-authored-by: Cursor <cursoragent@cursor.com>
Prominent disclaimer: not domain-verified; informational only; no ENISA endorsement or conformity assessment. Co-authored-by: Cursor <cursoragent@cursor.com>
docs: ENISA SME mapping (preliminary — not domain-verified)
Print scan line when mapping file exists for cra-baseline/medtech packs. Link from site art14/for-authorities and docs index with disclaimer. Co-authored-by: Cursor <cursoragent@cursor.com>
fix: ENISA re-point (preliminary mapping pointers)
Point install scripts, site pages, and public docs at RI-SE/curbpack; remove dual-remote mirror workflow and curb-sync loop. Keep go.mod and GitHub Action at afelin/curbpack@v0.5.2 until wave 2 tabletop. Co-authored-by: Cursor <cursoragent@cursor.com>
chore: canonicalize stranger URLs to RI-SE/curbpack
Co-authored-by: Cursor <cursoragent@cursor.com>
docs: fix post-sprint train SHA in launch-readiness
* docs: record Sprint A test-launch readiness gates Afelin Pages disabled; TTG 4s pass; claim-safety and redteam green. Tier-3 Discussion #4 and OG card smoke remain human. Co-authored-by: Cursor <cursoragent@cursor.com> * docs: align Sprint A note with private afelin / public RI-SE Action Co-authored-by: Cursor <cursoragent@cursor.com> * docs: reword Action pin note to avoid pin-guard false positive Co-authored-by: Cursor <cursoragent@cursor.com> * chore: acknowledge pin-guard on docs Action-owner note Docs-only: public Action owner switch already recorded; version pin stays v0.5.2. Approve-Pin-Bump: docs note only (version unchanged @v0.5.2) Co-authored-by: Cursor <cursoragent@cursor.com> --------- Co-authored-by: Cursor <cursoragent@cursor.com>
afelin/curbpack is private; strangers need RI-SE/curbpack@v0.5.2 and public release assets. Keep go.mod path github.com/afelin/curbpack (wave 2); binary install is the stranger path. Approve-Pin-Bump: action-owner RI-SE (version unchanged @v0.5.2) Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
fix: public Action pin RI-SE/curbpack@v0.5.2
Tagged …/v0.5.3/scripts/install.* 404'd before the release existed; main always serves the installer, which pins the published default_version. Co-authored-by: Cursor <cursoragent@cursor.com>
fix(site): point install curl/irm at main scripts
Replace stale Pending human tag with shipped release (f74cc96), agent-verified install+scan smoke, and A2/A3 still HUMAN. Co-authored-by: Cursor <cursoragent@cursor.com>
docs: record RI-SE v0.5.3 release honesty
Mirror RI-SE status: A1/A4/A5 re-verified; A2/A3 human blockers; Discussions OFF → first_run_feedback; Sprint B prep only; Sprint C deferred. Co-authored-by: Cursor <cursoragent@cursor.com>
docs: GO-WITH-GATES launch readiness (A2/A3 human)
Add repo-free review of received packs, sample fixtures, Phase 0 installer/SDD honesty, and reviewers-first site copy. Preserve on a branch for human review — not merge-ready until claim-safety outside sandbox. Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
feat: offline curbpack review wedge
Accept Next: or Next (optional): until the next binary; scrub dead Discussions CTAs; split Satisfied/Open in scan; warn on non-RI-SE CURBPACK_REPO and friendly 404 install guidance. Co-authored-by: Cursor <cursoragent@cursor.com>
Early+late Exit 0 invariant, Scan complete footer, and claim on badge; installers print REPO/URL before download; gate docs require Exit 0 always. Co-authored-by: Cursor <cursoragent@cursor.com>
fix: first-run honesty for scan, install, and tryout docs
After tag-smoke with CURBPACK_VERSION=v0.5.4, bump manifest/gate/scripts and docs so curl|sh downloads the first-run honesty binary. Action pin stays @v0.5.2. Not certification. Co-authored-by: Cursor <cursoragent@cursor.com>
Post-advertise consistency after main smoke: install marker, skilldata, docs index, security-model stranger pin, and launch-readiness A3 surrogate. Action stays @v0.5.2. Not certification. Co-authored-by: Cursor <cursoragent@cursor.com>
chore: advertise CLI install pin v0.5.4 (parity)
Retitle Tier-3 to the live v0.5.4 path, fix handoff smoke + Sprint B scorecard wording, and add a 10-minute human A2/A3 runbook before invites. Co-authored-by: Cursor <cursoragent@cursor.com>
…felin docs: align A2/A3 operator kit to v0.5.4 stranger path
Co-authored-by: Cursor <cursoragent@cursor.com>
…elin docs(tryout): scan cra-baseline vs init house-policy
Keep signal-integrity review implementation; merge main doc updates (v0.5.4 tryout, Pages disabled, RI-SE ENISA URLs, ship preflight test). Co-authored-by: Cursor <cursoragent@cursor.com>
…(#102) feat(review): signal integrity — digests, classifier, airlock, batch (afelin parity)
Document RI-SE-first fork policy, update agent contracts and PR template, add fork-policy-check CI guard in redteam-pilot, and warn on non-RI-SE ship targets. Co-authored-by: Cursor <cursoragent@cursor.com>
Curbpack check✅ Gates green — readiness 100%
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
docs/internal/fork-policy.md(RI-SE SoR, afelin downstream, allowed/forbidden flows)scripts/fork-policy-check.shwired as redteam-pilot case 12Why
Prevents #17-style full-tree parity/mirror PRs from overwriting public maintainer docs and removes stale "verify parity with afelin" operator text.
Test plan
go test ./..../scripts/redteam-pilot.sh(includes new case 12 fork-policy guard)curbpack check(pre-commit green)Repository policy
Made with Cursor