ci: gate what a package's registry page will actually show - #2261

Draft

seonghobae wants to merge 38 commits into

fix/2261-inherited-quality-gatesfrom

seonghobae/package-description-boundary

Commits on Sep 17, 2026

ci: gate what a package's registry page will actually show

seonghobae
and
claude
committed
aa5db87

Commits on Sep 18, 2026

ci: stop the description gate firing on a product's own domain

seonghobae
and
claude
committed
271cd1b
ci: let the directory name advise, not block

seonghobae
and
claude
committed
fcccbf8
fix(ci): remove template injection from the description gate

seonghobae
and
claude
committed
22b16e6

Commits on Sep 19, 2026

fix(ci): bind package gate to immutable release evidence
seonghobae
committed
e7f34ea
merge: integrate protected main into package boundary gate
seonghobae
committed
ad526e3
test(package): close credential and metadata fallbacks
seonghobae
committed
42c4939
fix(package): fail closed on built metadata boundary
seonghobae
committed
3b8ceba
docs(package): record fail-closed artifact boundary
seonghobae
committed
fe0a908
test(package): reject ambiguous archive metadata
seonghobae
committed
9715362
fix(package): bind descriptions to standard metadata roots
seonghobae
committed
a5603d8
docs(package): cite authoritative metadata roots
seonghobae
committed
1be0bf0
test(strix): bind evidence helper to trusted source root
seonghobae
committed
513302a
fix(strix): resolve evidence binder from trusted source
seonghobae
committed
c08b13d
test(strix): materialize trusted binder fixtures
seonghobae
committed
ca7e1e7
fix(strix): restore complete verified fixture tree
seonghobae
committed
db1fd61
test(strix): require consumer-free trusted binder fixture
seonghobae
committed
fb9c0e2
repair(strix): restore executable harness after binary blob corruption
seonghobae
committed
78b33a8
test(strix): require binder-free consumer fixture
seonghobae
committed
191bd63
test(strix): separate trusted gate from consumer root
seonghobae
committed
ef1a866
docs(strix): bind consumer isolation evidence to exact commits
seonghobae
committed
abc9a7d
docs(strix): describe separated trusted runtime fixture
seonghobae
committed
00082e8

Commits on Sep 20, 2026

test(strix): retain canonical gate source under scan
seonghobae
committed
782d67b
test(strix): red specialized fixture owner boundary
seonghobae
committed
a8d6261

Commits on Sep 21, 2026

test(strix): materialize specialized fixtures' trusted runtime outside the consumer root

Seongho Bae
and
claude
committed
bbe225d
test(strix): pin trusted evidence-binder path
seonghobae
committed
1794626

Commits on Sep 28, 2026

merge(main): restack package description boundary onto current main
seonghobae
committed
0fa8ed6

Commits on Sep 30, 2026

test(package-boundary): assert complete finding payload

seonghobae
and
claude
committed
3d88f0a

Commits on Oct 1, 2026

merge(ci): integrate package boundary with security owner
seonghobae
committed
d99f8c2
merge(ci): integrate proxy-free canonical security owner
seonghobae
committed
cebf820
merge(ci): preserve concurrent package boundary security repairs

seonghobae
and
claude
committed
0852d30
test(package-boundary): cover metadata failure and CLI branches

seonghobae
and
claude
committed
aebcc19
merge(ci): integrate verified inherited quality gate repair

seonghobae
and
claude
committed
5f71d5f