August 20, 2026
8 recorded commits · 3 named repos · 14 private commits
Work threads
ci6safdeps
- Private work 4 repos sealed
14 commits count toward the day. Names, subjects, and links stay private.
- Redflag6 changes
- ci: make the publication gate rerunnable4:06 p.m. · 14d4730 · public copy pending
- deps: lift patched public floors1:14 p.m. · 7427174 · public copy pending
CI found nine reachable Go issues and a high Axios advisory. Move to the published fixed floors and retire three stale Docker exceptions.
- ci: publish and verify forgejo releases12:40 p.m. · f6b03f4 · public copy pending
Tags now cross only after the release gates. Public assets are read back anonymously and hashed; the Rust Action pin now names its advertised stable commit.
- ci: remove codeberg release pushpoints12:12 p.m. · 95a6ec0 · public copy pending
- ci: publish only to forgejo12:07 p.m. · 5e15595 · public copy pending
- ci: gate and verify public releases12:02 p.m. · de0e700 · public copy pending
- souveraine1 change
- ci: preserve the staged shell archive3:42 p.m. · 7e6633a · ledger only
The package step erased its own input before the first copy. Keep the real zstd archive outside scratch and extract its single top-level tree.
- SouveraineOS1 change
- saf: fence schedules from authority1:38 p.m. · 575604a · ledger only
The watcher path, tool path, trigger files, and declared config do not meet. Record the traversal and prompt-injection boundaries before schedules wake an agent.