bastien 415b44ed25 fix(lib): vendor-skills validates lock fields, fullmatch guard ...

Two security-gate LOW notes closed on user ask: the SAFE guard uses
re.fullmatch so a trailing newline is rejected; commit (40 hex), source
(github.com owner/repo) and path (SAFE class, no traversal) are validated
before any URL is built, INVALID marker names the field. Suite 12 cases.

2026-09-28 02:35:52 +02:00

..

profiles

feat(lib): vendor-skills helper, five MengTo scroll skills pinned

2026-09-28 01:40:01 +02:00

project-archetypes

feat(guardrails): refusal ends the attempt; doctrine-citers census; make test suite=

2026-09-24 20:58:25 +02:00

seo-data

feat(seo-data): safe_fetch — resolve-then-pin, close DNS-rebinding + SSRF

2026-07-17 19:58:59 +02:00

tests

fix(lib): vendor-skills validates lock fields, fullmatch guard

2026-09-28 02:35:52 +02:00

analyze-before-plan.md

feat(analyze-before-plan): read-before bookend — scan memory (+code) before planning

2026-06-26 23:46:41 +02:00

animation-lib-check.sh

feat(animation): auto-install motion lib + detection across init/onboard/advisor

2026-04-27 15:32:46 +02:00

archetype-detector.md

feat(archetypes): add project archetype library + detection algorithm

2026-04-21 22:37:07 +02:00

capitalize-commit.md

chore(lib): capitalize-commit include protocol

2026-06-26 12:46:51 +02:00

challenge-plan.md

feat(agents): pin dispatched judgment agents to opus — Fable = inline reflection only (BDR-076)

2026-07-19 17:38:55 +02:00

contract-interview.md

feat(contract): STEP 2 CLARIFY, mid-run channel, how-to-ask

2026-09-16 22:12:13 +02:00

deploy-commit.sh

job4: SPEC-12 deploy-commit exit taxonomy

2026-07-06 21:55:25 +02:00

design-gate.md

feat(skills): site-motion, site-level scroll and transition choreography

2026-09-28 01:40:01 +02:00

design-tool-gate.sh

feat(21st): replace the magic MCP with the @21st-dev CLI + skill pack

2026-09-22 02:53:31 +00:00

detect-plugins.sh

job5: J5-10 delete plugin_enabled (last caller replaced at 6d72d0a)

2026-07-07 00:14:06 +02:00

doc-commit.md

feat(agents): W2/S2 doc pipeline two-mode + last inline conversions (BDR-077)

2026-07-19 22:28:09 +02:00

doc-commit.sh

feat(memory): guards, doctor stats and doc-commit exclusions follow CLAUDE.global.md

2026-07-14 03:55:25 +02:00

doc-shape.sh

feat(doc-sync): MINOR-shape oracle + fail-loud commit (strengthen MINOR gate)

2026-06-29 17:41:24 +02:00

fast-libs.sh

feat(ctx7): coverage extension — fast-libs single source + reminder hook + executor briefs (BDR-078)

2026-07-20 10:45:06 +02:00

floor-guard.sh

feat(lib): floor-guard, diff-scoped detector of a weakened quality bar

2026-09-27 20:17:36 +02:00

gates.sh

feat(gates): deterministic floor (GATE 0) under the fresh verifier

2026-08-24 13:12:38 +02:00

gitflow-aiguillage.md

refactor(doctrine): C2 coherence — 30 doctrine/skill tensions resolved, doctrine wins (BDR-099)

2026-09-24 20:25:40 +02:00

gitflow-test.sh

fix(gitflow): init on an existing repo under the machine-wide hooks lands the socle via a chore/gitflow-adopt merge (T2c)

2026-09-24 20:25:39 +02:00

gitflow.sh

fix(gitflow): init on an existing repo under the machine-wide hooks lands the socle via a chore/gitflow-adopt merge (T2c)

2026-09-24 20:25:39 +02:00

graphify-gate.sh

feat(graphify): threshold signal from 200 tracked code files, the banner informs and the user decides

2026-09-24 12:12:16 +02:00

gstack-playwright.sh

feat(gstack): share the Playwright bump, report the browser cache

2026-09-15 14:57:31 +02:00

memory-commit.sh

job5: J5-13 delete pending verbs (v2 hook rejected by BDR-037, J4-17 moot)

2026-07-07 00:53:49 +02:00

model-check.sh

feat(model-routing): model-check witness (big/small/unknown) + flip-tests

2026-07-15 11:00:32 +02:00

model-gate.md

feat(routing): W1 no-inherit — fable skill-runners, opus review dispatches, dispatch-tier doctrine (BDR-077)

2026-07-19 19:51:06 +02:00

plugin-gate.md

feat(agents): W2/S1 plugin split — probe (sonnet) + advisor reasoner (opus) + plugin-gate include (BDR-077)

2026-07-19 20:57:10 +02:00

profile.sh

feat(lib): vendor-skills helper, five MengTo scroll skills pinned

2026-09-28 01:40:01 +02:00

reconcile.sh

feat(reconcile): deterministic declared-vs-real engine + thin gated skill

2026-06-30 13:42:24 +02:00

skill-routing-census.py

test(lib): skill-routing census, TF-IDF collisions across the live catalog

2026-09-27 20:17:37 +02:00

source-scope.sh

fix(seo,geo): C1a — find sees build output, grep does not; the two disagreed

2026-07-17 09:50:57 +02:00

toggle-external.sh

feat(lib): vendor-skills helper, five MengTo scroll skills pinned

2026-09-28 01:40:01 +02:00

url-guard.sh

feat(seo-data): safe_fetch — resolve-then-pin, close DNS-rebinding + SSRF

2026-07-17 19:58:59 +02:00

vendor-skills.sh

fix(lib): vendor-skills validates lock fields, fullmatch guard

2026-09-28 02:35:52 +02:00

verify-secure-loop.md

feat(verifier): floor-guard waivers outside test files need a CLARIFICATIONS ack

2026-09-27 21:20:36 +02:00