3.8.0 scope: the deep-gate fixes, made reviewable - #139

Merged

b7n0de merged 30 commits into

mainfrom

ci/version-consistency-gate

Aug 16, 2026

Commits on Aug 7, 2026

ci: extend the release-integrity gate to prose places and external surfaces
kraxo
committed
4180a1b
docs: add the release gate and the 3.7.1 scope list
kraxo
committed
b87be3d
Merge remote-tracking branch 'origin/main' into ci/version-consistency-gate
kraxo
committed
00c2db7
docs: correct the ruff measurement in the 3.7.1 scope list
kraxo
committed
c5d420d
docs: align the in-toto profile docs with what was actually submitted
kraxo
committed
871453c
fix: anchor the post-tag drift check on the last RELEASE tag
kraxo
committed
b48e52b
docs: add the Unreleased section the drift check was missing
kraxo
committed
03bcc03
test: pin the invariants both in-toto docs must keep saying
kraxo
committed
2c5e7a5
docs: the scope list was missing two of the things that ship
kraxo
committed
3267104
docs: carry the asymmetry non-claim into both in-toto copies
kraxo
committed
b6f9395
feat(gate): catch the version place nobody declared, and name every number's object
kraxo
committed
768e299
docs: the three things an integrator looks for first, and the measured assurance state
kraxo
committed
9e3e53d
docs+ci: publish the Scorecard value, and put the provenance where the check looks
kraxo
committed
d3401a7

Commits on Aug 8, 2026

fix(release): the provenance leaves dist/, and the publish gate becomes an allowlist
kraxo
committed
9e523ba
fix(relation): relation gates bind at every hop, not only at the receipt's own edge
kraxo
committed
ee356c3
fix(register): Identitaet wird auf derselben Achse entschieden wie Severity und Status

kraxo
and
claude
committed
4bb09c0
fix(budget): direct-dict surfaces reach the structural budget (L2-01, P1)

kraxo
and
claude
committed
97c929a
fix(pre-tag): the audit verdict comes from a record, not from prose (L5-02, P1)

kraxo
and
claude
committed
264fcd3
fix(sdist): the from-sdist skip set is derived, not enumerated (L6-01, P1)

kraxo
and
claude
committed
f112710
fix(persample): the merkle_path cap runs before the work it bounds (L2-02, P2)

kraxo
and
claude
committed
2c52596
fix(paths): a type floor before the os boundary, not a wider except-tuple (L1-01, P2)

kraxo
and
claude
committed
239f5aa
fix(gate): a deferral is resolved against the tree, not asserted (L1-03, part)

kraxo
and
claude
committed
673baa6
fix: was die Pflicht-Review-Lane an meiner eigenen Arbeit fand

kraxo
and
claude
committed
addcaee
Revert "fix(persample): the merkle_path cap runs before the work it bounds (L2-02, P2)"

kraxo
and
claude
committed
c391117
docs(changelog): withdraw the merkle_path cap entry, and say why

kraxo
and
claude
committed
bc3ae70
docs(changelog): die eigene Korrektur wiederholte den Fehler, den sie beschreibt

kraxo
and
claude
committed
bc9b51b

Commits on Aug 12, 2026

docs(readme): name the fourth unpursued check, and stop the provenance claim being early

kraxo
and
claude
committed
a83f01e

Commits on Aug 16, 2026

Merge branch 'main' into ci/version-consistency-gate
kraxo
committed
f1acc80
fix(sdist-ableitung): ein ungebautes Artefakt ist kein sdist-Signal

kraxo
and
claude
committed
f31862e
fix(test): der Bauartefakt-Test misst im sdist die Umgebung, nicht die Eigenschaft

kraxo
and
claude
committed
9fe1a40