Production hardening: correctness, verification and release gates - #1

Merged

dharan1007 merged 118 commits into

mainfrom

agent/production-hardening

Sep 13, 2026

Commits on Aug 17, 2026

fix build packaging
dharan1007
committed
3e5bf2a
harden release scripts
dharan1007
committed
a6f84c0
fix dependency-first planning
dharan1007
committed
b63caed
test dependency planning
dharan1007
committed
dd5079d
make file mutations fail closed
dharan1007
committed
d5badd3
test transactional patches
dharan1007
committed
80f23d5
make validation fail closed
dharan1007
committed
e333d77
fix incremental scan semantics
dharan1007
committed
51753c4
fix model-specific provider caching
dharan1007
committed
36f9aba
unify orchestrator state database
dharan1007
committed
e862347
fix persistent failure memory
dharan1007
committed
57e9671
require evidence before agent success
dharan1007
committed
7f85455
restore full agent checkpoints
dharan1007
committed
18cf401
make scans durable and graph-consistent
dharan1007
committed
3055929
add release CI gate
dharan1007
committed
2cdf619
bound embedding retrieval memory
dharan1007
committed
817bb56
use hybrid typed retrieval context
dharan1007
committed
bde9950
fix session memory typing
dharan1007
committed
e66b616
update CI action runtimes
dharan1007
committed
66b4671
modernize model capability registry
dharan1007
committed
dd8e421
use current OpenAI Responses API
dharan1007
committed
2412ce7
modernize Gemini models and embeddings
dharan1007
committed
8aca71a
modernize Anthropic defaults
dharan1007
committed
2657c8a
use verified model identifiers only
dharan1007
committed
6228773
route models by semantic task role
dharan1007
committed
d62adc2
lock dashboard to loopback
dharan1007
committed
8f8cc29
make command sandbox disposable and secret-safe
dharan1007
committed
b7f8b65
wire planner depth and remove overstated execution claim
dharan1007
committed
4432c4e
add independent verification kernel
dharan1007
committed
1c7686d
fix semantic router task typing
dharan1007
committed
3bdaa17
add transactional change operation types
dharan1007
committed
588050e
restore parser types and add transaction metadata
dharan1007
committed
0b64323
migrate change history for transactional rollback
dharan1007
committed
3b3bbc8
store operation-aware change transactions
dharan1007
committed
5c9e914
make rollback conflict-safe and operation-aware
dharan1007
committed
15253b5
make independent verification the completion authority
dharan1007
committed
547989c
finish sandbox fail-closed hardening
dharan1007
committed
3ee0fd3
make propagation graph-fresh and verification-gated
dharan1007
committed
8e83c90
route chat through hardened agent runtime
dharan1007
committed
2a2d7d7
document verified production contract honestly
dharan1007
committed
3fbd51f
document real security boundaries
dharan1007
committed
ef50270
align environment template with runtime
dharan1007
committed
52aa823
test independent verification kernel
dharan1007
committed
945d9a3
replace release guide with gated publish procedure
dharan1007
committed
4cf9d9c
align CLI copy with verified runtime
dharan1007
committed
d75f383
make CLI signal handling terminate correctly
dharan1007
committed
43fbeb6
preserve signal exit status while cleaning databases
dharan1007
committed
c34457e
route ask through verified AgentLoop
dharan1007
committed
c6e9859
replace broken apply flow with verified downstream repair
dharan1007
committed
bef35d0
route fix through verified AgentLoop
dharan1007
committed
0b0f88e
make watch mode explicitly read-only
dharan1007
committed
0ebceef
migrate all checkpoint resumes through verified AgentLoop
dharan1007
committed
b31fad0
test model-specific provider isolation
dharan1007
committed
3dcf9e2
test durable project failure memory
dharan1007
committed
141f72e
test in-place change history migration
dharan1007
committed
940b983
remove shell interpolation from diagnostics
dharan1007
committed
cac6673
report verified agent outcomes accurately
dharan1007
committed
562ded3
prevent legacy mutation engines from returning to CLI
dharan1007
committed
c5e45e9
bind AI cache entries to repository context and model config
dharan1007
committed
4450c19
add production dependency security gate
dharan1007
committed
507ce84
test dashboard loopback security boundary
dharan1007
committed
81123ca
test lexical retrieval without embeddings
dharan1007
committed
fdd0886

Commits on Aug 21, 2026

fix(security): upgrade vulnerable production dependencies
dharan1007
committed
04b6d09
chore: regenerate audited dependency lockfile
dharan1007
committed
9198dc4
chore: refresh lockfile with non-breaking audit fixes
dharan1007
committed
18f2ab1
fix(security): refresh audited dependency lockfile
github-actions[bot]
committed
d8f7432
chore: remove temporary lockfile refresh workflow
dharan1007
committed
daf4336
chore: verify dependency remediation end to end
dharan1007
committed
455a600
chore: record post-remediation verification evidence
github-actions[bot]
committed
9b7504c
fix(cli): track readline closure without unsupported property
dharan1007
committed
350d43b
chore: rerun post-remediation verification after CLI fix
dharan1007
committed
281f058
chore: record post-remediation verification evidence
github-actions[bot]
committed
cffe28e
chore: capture failing verification assertions
dharan1007
committed
eea023d
chore: record post-remediation verification evidence
github-actions[bot]
committed
727befb
fix(retrieval): preserve lexical index without embeddings
dharan1007
committed
c3fd277
fix(server): reject raw encoded traversal paths
dharan1007
committed
ba9d7bf
test(server): send traversal path without URL normalization
dharan1007
committed
ac9d14f
feat(security): centralize project path and secret policy
dharan1007
committed
2f9ce20
fix(security): enforce secret-aware path policy in native tools
dharan1007
committed
cf4a3d4
fix(rollback): revalidate root and symlink containment
dharan1007
committed
9e063ad
fix(risk): make semantic assessment fail safe
dharan1007
committed
00c5669
fix(verification): detect framework gates correctly
dharan1007
committed
755e1f4
fix(deploy): remove shell injection boundary
dharan1007
committed
ca31454
fix(git): remove filename shell interpolation
dharan1007
committed
11d5913
fix(env): separate dependency inspection from installation
dharan1007
committed
cd912bf
fix(env): make initialization read only
dharan1007
committed
38c7684
feat(env): make dependency installation explicit
dharan1007
committed
0a0c8ad
fix(orchestrator): bound queues and isolate provider failover
dharan1007
committed
e101ab1
fix(orchestrator): isolate traffic scheduling per project
dharan1007
committed
2a81776
feat(models): route semantic roles to current frontier models
dharan1007
committed
978cc49
fix(provider): make OpenAI health checks authoritative
dharan1007
committed
ef736ad
fix(provider): make Gemini health checks authoritative
dharan1007
committed
68aa37f
fix(graph): preserve case-sensitive filesystem identities
dharan1007
committed
51339f6
chore: apply runtime contract remediation
dharan1007
committed
66c5272
feat(scanner): extract API clients and database contracts
dharan1007
committed
0abeec2
fix(scanner): keep API call contract type local
dharan1007
committed
43169de
feat(scanner): persist extracted cross-layer contracts
dharan1007
committed
3f4da3e
feat(sync): detect schema drift from persisted analyses
dharan1007
committed
af19d19
feat(sync): compare persisted client calls with API contracts
dharan1007
committed
e4e8d01
feat(sync): compare real TypeScript interface shapes
dharan1007
committed
5398e14
fix(sync): remove fake auto-fix path and wire persisted contracts
dharan1007
committed
57b3e39
feat(agent): add atomic mutation transaction journal
dharan1007
committed
a32b71c
feat(agent): implement verified transactional agent runtime
dharan1007
committed
eb67e53
refactor(agent): make transactional runtime canonical
dharan1007
committed
d786c2a
test: cover path policy transactions graph and traffic safety
dharan1007
committed
21950d5
test: cover API and database contract extraction
dharan1007
committed
6f193bc
feat(site): add minimal Codebase OS product website
dharan1007
committed
0870153
feat(site): add Codebase OS visual system
dharan1007
committed
d762a54
feat(site): add lightweight interactions
dharan1007
committed
83dff50
feat(site): add favicon
dharan1007
committed
795eab4
build(site): add deterministic static-site build
dharan1007
committed
c361cb0
build(site): configure Vercel static deployment
dharan1007
committed
4f5274e
fix(site): remove unverified install and demo metrics
dharan1007
committed
2d8abf3
fix(site): make runtime trace schematic and evidence-safe
dharan1007
committed
18d73ba
fix(ci): make OpenAI model discovery type-safe
dharan1007
committed
cc7f721
fix(ci): align deploy subprocess stdio types
dharan1007
committed
4364a71
fix(ci): keep provider failover retry alive until settled
dharan1007
committed
1456f8b
chore(ci): remove obsolete runtime remediation workflow
dharan1007
committed
cd48ddf