Round-3 audit: 28 contained fixes (TLS roots, lock guards, staging, env recovery, process groups) by im-tyler · Pull Request #4 · useteploy/teploy-cli

fix(releasemeta,deploy): A01+A02+A03 — app-scoped TLS attempts, retention-window prune, fail-closed pins

im-tyler

committed

4537b89

fix(state): A04+A06 — owner-checked lock release, unique owner-scoped staging

im-tyler

committed

dd8a788

fix(deploy): A08+A10+A11+A13+A26 — same-version predecessor guard, publish-branch route restore, detached compensation, honest recovery reporting, logged image

im-tyler

committed

89625d3

fix(deploy,docker,releasemeta,ssh): A15+A17+A18+A23+A52+A14 — attempt-scoped assets, plan validation, default port, image pinning, worker readiness, partial-run reconcile

im-tyler

committed

2faab70

fix(docker,deploy): A19+A21+A25 — bracketed validated publish bindings, ambiguity-refusing port inspectors, honest prune accounting

im-tyler

committed

784c955

fix(ssh,cli): A27+A28+A32 — atomic local uploads, process-tree cancellation, derived provisioning identity

im-tyler

committed

3b6025d

fix(backup): A39+A40+A41+A44+A46 — mandatory env recovery copy, proven AOF gate, post-stop snapshot + start compensation, collision-proof backup ids, unsigned cron grammar at the sink

im-tyler

committed

8bd4b70

fix(multideploy,cli): A36+A51 — serialized atomic dedup persistence, content-authoritative replay protection, race-free bounded prefix writers, cancellation-aware fleet slots

im-tyler

committed

d2e2d76

docs(audit): round 3 (A01-A52) recorded — 28 contained fixes, 24 standing deferrals with evidence folded in

im-tyler

committed

2bfdd0b

Navigation Menu

Round-3 audit: 28 contained fixes (TLS roots, lock guards, staging, env recovery, process groups) - #4

Round-3 audit: 28 contained fixes (TLS roots, lock guards, staging, env recovery, process groups)#4
im-tyler merged 9 commits into
mainfrom
audit/round3

Commits on Sep 19, 2026

fix(releasemeta,deploy): A01+A02+A03 — app-scoped TLS attempts, retention-window prune, fail-closed pins

fix(state): A04+A06 — owner-checked lock release, unique owner-scoped staging

fix(deploy): A08+A10+A11+A13+A26 — same-version predecessor guard, publish-branch route restore, detached compensation, honest recovery reporting, logged image

fix(deploy,docker,releasemeta,ssh): A15+A17+A18+A23+A52+A14 — attempt-scoped assets, plan validation, default port, image pinning, worker readiness, partial-run reconcile

fix(docker,deploy): A19+A21+A25 — bracketed validated publish bindings, ambiguity-refusing port inspectors, honest prune accounting

fix(ssh,cli): A27+A28+A32 — atomic local uploads, process-tree cancellation, derived provisioning identity

fix(backup): A39+A40+A41+A44+A46 — mandatory env recovery copy, proven AOF gate, post-stop snapshot + start compensation, collision-proof backup ids, unsigned cron grammar at the sink

fix(multideploy,cli): A36+A51 — serialized atomic dedup persistence, content-authoritative replay protection, race-free bounded prefix writers, cancellation-aware fleet slots

docs(audit): round 3 (A01-A52) recorded — 28 contained fixes, 24 standing deferrals with evidence folded in