2 Commits

Include renames

Author	SHA1	Message	Date
weichen	9374986b63	Lock CI checkout credential scope to the injected server and allowlist ... Why: 复核轮遗留的安全测试草稿按「常量=传输端点」设计，与 PR #213 已合入的 「注入基址=传输端点」语义相反，原样提交会红。适配为锁定真实不变量。 Evidence: python3 -m unittest tests.test_ci_credentials 8/8 OK（含新用例： 任一注入拼写检出成功、凭据仅落白名单路径且令牌分离、非 http(s) 注入 fail-closed）。 Impact: 仅测试文件；不改 ci.yaml 行为。 Refs: PR #213 run 950 诊断（GITHUB_SERVER_URL=http://172.17.0.1:3000）。	2026-10-05 13:45:58 +00:00
weichen	8af945a1d5	Make development gates preserve work and verifiable evidence ... Why: cleanup, component synchronization, receipt recording and credential handling could contradict the documented development boundaries. Evidence: SELF 75 isolated governance tests and source checks are captured in .task/feature-governance-reliability.md; combination and CI verification follow. Impact: hardens local task and CI tooling, aligns policy and component documentation, and adds continuous regression tests without changing product behavior. Refs: .task/feature-governance-reliability.md; policy/governance.md; policy/platform-admission.md	2026-10-05 12:36:02 +00:00