fix: republish research evidence for the merged control-plane boundary source - #1404
Merged
Merged
Conversation
Collaborator
Author
|
Ground Control delivery — this pull request delivers issue #1359; Phase E runs on merge. |
8 tasks done
Brad-Edwards
added a commit
that referenced
this pull request
Sep 30, 2026
… advisories (#1405) * fix(deps): upgrade pyjwt to 2.15.1 and urllib3 to 2.8.0 for published advisories The pyjwt 2.15.1 upgrade from #1404's branch was dropped by a later merge-conflict resolution that took dev's uv.lock, so dev shipped pyjwt 2.14.0 (GHSA-42vr-xj54-vc7v). urllib3 2.7.0 has three new advisories fixed in 2.8.0 (GHSA-8988-9cw3-xx77, GHSA-gh4c-6fx4-qh6g, GHSA-vxq7-64xx-v4gw). Both made the osv-scan supply-chain gate fail. Regenerate the hash-complete smoke closures and republish both research-evidence captures, which bind to the locked dependency set: specification coverage 65.0.0 and formal semantic validation 66.0.0. * style: format the specification-coverage release set * fix(formal): rebind the crossing model bundle to the upgraded lock
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
#1394 merged at its base-sync commit. That commit carried
dev's research evidence captures, which were cut before the #1394 control-plane source changes, sodevnow records an implementation digest that no longer matches its source. This republishes both research evidence captures abovedev's latest releases and binds them to the merged source. No runtime code changes.Requirement UIDs
API-404Related Issues
Refs #1359
ADR Impact
Changes
execution-snapshot-v64.json,analysis-v64.json, issue-1359 bundle) replays the retained matrix against the merged feat: enforce the administrative-only runtime API trust boundary #1394 source.execution-snapshot-v65.json,analysis-v65.json,retest-v65.json) replays the retained formal cases with baseline 64.0.0.tools/check_specification_coverage.py,tools/formal_semantic_validation/, and the three evidence test modules. Both research indexes record the new releases, and the formal index's current-release statement is corrected to 65.0.0.Test Plan
Both evidence checker CLIs pass (integrity and replay), the three evidence modules pass including their integration lane (223), the control-plane test files pass (1,060), and fast-feedback and repo policy are green.
Ground Control Checks
Traceability
Checklist
Documentation
Updated: see diff.