Sync audited public release boundary - #2
Conversation
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 0fca3ea82a
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| except (OSError, UnicodeDecodeError, json.JSONDecodeError) as exc: | ||
| parse_errors.append(f"{PUBLICATION_INVENTORY}: unable to load legal/evidence statuses: {exc}") | ||
| else: | ||
| units = inventory.get("review_units") |
There was a problem hiding this comment.
Reject non-object publication records without throwing
When either publication JSON file contains syntactically valid non-object JSON such as [], json.loads succeeds but this .get (and the equivalent decision-record access below) raises AttributeError, bypassing the structured parse_errors result. Both the source-provenance and publication/export audits therefore terminate with a traceback instead of preserving deterministic FAIL evidence; validate the decoded top-level value is a dictionary before accessing fields.
AGENTS.md reference: AGENTS.md:L3-L3
Useful? React with 👍 / 👎.
| "FINALIZATION_REPORT.md", | ||
| "PROJECT_REFACTOR_REPORT.md", | ||
| "docs/release/LICENSE_PROVENANCE_REVIEW.md", | ||
| "migration_receipt.json", |
There was a problem hiding this comment.
Remove public references to excluded evidence reports
When a user checks out or exports this revision, these exclusions coincide with deleting migration_receipt.json and the two root reports, but docs/MIGRATION.md still says the receipt records the moves and docs/release/REQUIREMENTS_TRACEABILITY.md still marks FINALIZATION_REPORT.md as persisted PASS evidence. Those public source-of-truth claims now point to files users cannot inspect; update them to identify the records as private/removed or replace them with available public evidence.
AGENTS.md reference: AGENTS.md:L3-L3
Useful? React with 👍 / 👎.
Source: an audited, frozen private revision.