Skip to content

feat: surface bounded compose target advisory - #232

Open
Joncallim wants to merge 1 commit into
codex/69-compose-target-finding-apifrom
codex/69-compose-target-finding-web
Open

feat: surface bounded compose target advisory#232
Joncallim wants to merge 1 commit into
codex/69-compose-target-finding-apifrom
codex/69-compose-target-finding-web

Conversation

@Joncallim

Copy link
Copy Markdown
Owner

Summary

  • render the closed Compose target advisory only with static, generic copy
  • suppress findings unless both model provenance and evidence mode are live
  • keep opaque refs, IDs, evidence metadata, and provider text out of the DOM; use only a generic Changes inspection link

Checks

  • npm run typecheck
  • npm run test -- --run src/lib/findingPresentation.test.ts src/screens/findings.test.tsx
  • npm run build
  • npm run test:web (324 tests)

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 2, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review Completed 2026-09-02T15:07:34.329522Z 4940af4 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@Joncallim
Joncallim force-pushed the codex/69-compose-target-finding-web branch from 4940af4 to 6fc32f6 Compare September 2, 2026 15:05

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4940af4b3b

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

return <Panel key={`${finding.ruleId}-${index}`} title={presentation.title} icon="alert" hint={presentation.hint}>
<div className="tag-wrap"><Tag tone={presentation.tone}>{presentation.severityLabel}</Tag><Tag tone="muted">{presentation.category}</Tag></div>
<p className="muted-copy">{presentation.recommendation}</p>
{presentation.inspectChanges && <Link className="ghost-link" to="/changes">Inspect recent changes <Icon name="arrow" size={14} /></Link>}

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Link the advisory to evidence that can be inspected

When this Compose card renders, the screen has already restricted it to the live/live context, but changeFeed returns CHANGE_HISTORY_CLAIM for every non-demo context, so /changes is guaranteed to show “Not collected” rather than any relevant history. The new “Inspect recent changes” action is therefore a dead end for every real Compose advisory; point it to current runtime/service evidence or omit it until live change collection is available.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant