Close release P0 hardening gaps - #7

Merged

kdnsna merged 14 commits into

mainfrom

codex/release-p0-hardening

Jul 23, 2026

Commits on Jul 21, 2026

docs: define release P0 hardening design
kdnsna
committed
a03ca27
docs: plan release P0 hardening
kdnsna
committed
fd59b75
fix: reject WeChat transport redirects
kdnsna
committed
7d0a8c8
fix: persist suppressed report notifications
kdnsna
committed
35e30aa
fix: keep canonical reports in delivery outbox
kdnsna
committed
ed560c4
fix: harden runtime config and release gates
kdnsna
committed
558bb32
fix: bind observer runtime manifest argument
kdnsna
committed
377e015

Commits on Jul 22, 2026

fix: remove obsolete vendor gitlink
kdnsna
committed
26dcd9f
fix: provide deterministic CI runtime
kdnsna
committed
64ed298
fix: quote CI transport guard safely
kdnsna
committed
eda765d
fix: allow CodeQL workflow metadata read
kdnsna
committed
6f89d79
fix: keep private CodeQL analysis local
kdnsna
committed
466b7b7

Commits on Jul 23, 2026

Enforce runtime manifests and canonical report delivery
kdnsna
committed
c83d401
fix: initialize runtime manifest in CI
kdnsna
committed
c29ca08