Repository navigation
docs(spec-loop): sync specs with main up to 1e5c4f911 - #2012
Merged
Merged
Conversation
Describe the ASF network scoping from apache#1978, including the claim it made false that containers share the sandbox's host allow-list. Record the run cost and pointer proof from apache#2000, the verify-rc pane from apache#2007, and the nine-skill pr-management family. Recheck every Known gaps bullet in eleven specs: delete those now closed, rewrite the stale ones, and annotate the rest with gap-closes-when. Generated-by: Claude Opus 5
potiuk
added
the
family:dev
potiuk
enabled auto-merge (squash)
November 5, 2026 15:34
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
mainup to1e5c4f911, covering fix(sandbox): scope ASF network grants to ASF projects #1978, feat(optimize-skill): prove pointers and estimate what a run reads #2000 and feat(release-management): add verify-rc live checklist pane mod scaffolding and UI component #2007. fix(setup): stop reading the user's unloaded settings.local.json in configured() #2002, fix(adversarial-review): review a PR's head, and close two gaps from #1997 #2004 and fix(pr-management): use ERE residue groups and precheck empty matches #2009 needed no spec change, and docs(security): answer the threat model's open questions #2010 is docs only.EGRESS_ALLOW_EXTRA.pr-management-family.mdwith the nine the family has.gap-closes-when. One real predicate was added:path-exists:tools/forgejo/pyproject.toml.spec-validateSOFT advisories drop from 135 to 78.Type of change
docs/,README.md,CONTRIBUTING.md)Test plan
prek run --all-files --skip workspace-pytestpasses, includinglycheespec-validate: no HARD violationscheck-doc-syncpassesRFC-AI-0004 compliance
No skill, tool or behaviour changes: specs and
.last-synconly.Linked issues
Follows #2001.
Notes for reviewers
none (narrative):marketplace-distributionon verified manifests and on Antigravity,pr-management-familyon thepr-triageandpr-stale-sweepsplit, andadapterson the chatnonebackend.agent-isolation-sandbox's "not exercised with a real adopter session", and whether feat(tools/gitlab): add tracker + forge bridge for GitLab-hosted projects #305, feat(tools/forgejo): forge + tracker bridge for Codeberg / Gitea / Forgejo #310 and feat(tools/bitbucket): Bitbucket forge + tracker bridge (Atlassian) #606 are still open.sandbox-diagnosticsacceptance 1 and 3 ("one probe per catalog entry") no longer match the catalog, which has 16 entries and 6 with no probe.🤖 Generated with Claude Code