All pull requests

Pull requests

• feat(audit): weekly CodeRabbit Deep Scan audit that files findings as issues

  #1437·don-petry opened Oct 30, 2026Contributor·4 of 5 tasks·

  ·
  10

• fix(deps): bump central pip-audit lock to pip-api 0.0.35 for Python 3.15

  dev-lead:hands-off
  #1435·don-petry opened Oct 30, 2026Contributor·3 of 4 tasks·

  ·
  6

• fix(dependency-audit): bump pip-api to 0.0.35 in pip-audit tooling lock

  dev-lead:hands-off
  #1432·don-petry opened Oct 30, 2026Contributor·

  ·
  6

• fix(dependency-audit): pin pip-audit Python to 3.13 instead of floating 3.x

  dev-lead:hands-off
  #1431·don-petry opened Oct 30, 2026Contributor·

  ·
  6

• feat: implement issue #1343 — Compliance audit — 2026-10-16

  auto-rebase:readyneeds-human-review
  #1426·don-petry opened Oct 29, 2026Contributor·

  ·
  1

  14

• fix(security): restrict canary rollback to registered mutable channels (#1402)

  dev-lead:hands-offneeds-human-review
  #1423·don-petry opened Oct 28, 2026Contributor·

  ·
  1

  29

• fix(security): gate Dependabot approve/merge on check success and commit provenance (#1399, #1400)

  dev-lead:hands-offneeds-human-review
  #1421·don-petry opened Oct 28, 2026Contributor·

  ·
  2

  30

• fix(security): workflow/CI hardening batch (#1384, #1391, #1396, #1405)

  dev-lead:hands-offneeds-human-review
  #1419·don-petry opened Oct 28, 2026Contributor·

  ·
  4

  20

• fix(security): keep Discussion writes out of the feature-ideation model job (#1389)

  dev-lead:hands-offneeds-human-review
  #1418·don-petry opened Oct 28, 2026Contributor·

  ·
  1

  40

• fix(security): scope SONAR_TOKEN to scan steps and fail unanalysed fork PRs (#1390, #1392)

  dev-lead:hands-offneeds-human-review
  #1417·don-petry opened Oct 28, 2026Contributor·

  ·
  2

  30

• feat: implement issue #1361 — SonarCloud: code security review (pythonsecurity)

  auto-rebase:readyneeds-human-review
  #1383·don-petry opened Oct 27, 2026Contributor·

  ·
  1

  45

• feat(standards): include GEMINI.md in agent configuration standard and audit

  needs-human-review
  #1378·don-petry opened Oct 26, 2026Contributor·6 tasks done·

  ·
  98

• chore(deps): Bump filelock from 3.29.7 to 4.2.1 in /scripts

  dependenciespython
  #1376·dependabot[bot] opened Oct 25, 2026Bot·

  ·
  2

• feat: implement issue #1296 — Standards sweep reuses a same-date sync branch as-is — a narrower second run opens a PR carrying the first run's commits

  auto-rebase:readyneeds-human-review
  #1299·don-petry opened Oct 11, 2026Contributor·

  ·
  1

  56

• feat: implement issue #1297 — Synced stubs in ring repos carry a header naming v1-stable above a uses: line pinned to their ring — bots flag it and agents edit the stub to match

  auto-rebase:ready
  #1298·don-petry opened Oct 11, 2026Contributor·

  ·
  1

  309

• feat: implement issue #1210 — [Phase 2] Switch feature-ideation-reusable.yml model default to the opus family and verify alias resolution

  #1245·don-petry opened Oct 3, 2026Contributor·

  ·
  1

  280

• feat: implement issue #1202 — [Phase 1] safety-checks lib with sc_description_missing

  dev-leadneeds-human-review
  #1218·don-petry opened Oct 1, 2026Contributor·3 of 4 tasks·

  ·
  1

  80

• feat: implement issue #1193 — SonarCloud: shell script hygiene

  #1196·don-petry opened Sep 29, 2026Contributor·

  ·
  1

  372

• feat: implement issue #1103 — cmd_rollback moves the bare <agent>/<ring> tag, not <agent>/v<M>-<ring> — the emergency lever is a silent no-op for every v-scoped agent

  needs-human-reviewsize:L
  #1117·don-petry opened Sep 13, 2026Contributor·

  ·
  1

  44

• feat: implement issue #1115 — [bug] dismiss-stale-bot-reviews is missing from this repo — a stale bot CHANGES_REQUESTED blocks PRs forever (blocking #1094)

  needs-human-reviewsize:XL
  #1116·don-petry opened Sep 12, 2026Contributor·

  ·
  1

  269