Vincent Koc 1da74794b6 fix(release): establish immutable release plan contract (#127008) ...

* fix(release): define immutable release plan contract

* fix(release): harden immutable plan authority

* fix(release): tighten release plan authority

* fix(release): share plugin publication authority

* fix(release): verify plan authority remotely

* fix(release): track ClawHub publication authorities

* fix(release): trust remote tooling tag identity

* fix(release): close plugin publication authority

* fix(release): align npm authority selection

* fix(release): bind plans to validation intent

* fix(release): require qualification cadence

* fix(release): reject lossy canonical values

* fix(release): narrow qualification cadence

* fix(release): bind plan parser dependency

* fix(release): add tagless diagnostic plans

* fix(release): attest release plan parser tree

* fix(release): isolate verified plan parser snapshot

* fix(release): verify plan tooling before execution

2026-08-21 11:24:22 -07:00

..

actions

fix(ci): isolate candidate cache authority (#127149)

2026-08-21 03:47:41 -07:00

codeql

feat(secrets): authenticated egress substitution proxy with destination binding (#123216)

2026-08-13 20:49:31 -07:00

codex/prompts

feat(mantis): let proof agents extend desktop control (#127271)

2026-08-21 23:09:17 +05:30

images/live-media-runner

ci: preinstall ffmpeg for live media checks

2026-04-29 03:48:33 +01:00

instructions

refactor: remove obsolete commit helper

2026-08-06 18:10:10 -07:00

ISSUE_TEMPLATE

docs(templates): ask feature requesters whether they plan to implement (#109258)

2026-07-16 18:44:41 -07:00

release

ci: mirror Docker release images to Vercel registry (#120058)

2026-08-10 14:45:05 -07:00

workflows

fix(release): establish immutable release plan contract (#127008)

2026-08-21 11:24:22 -07:00

actionlint.yaml

fix(ci): retain pending QA workflow calls (#126254)

2026-08-20 00:34:26 +08:00

CODEOWNERS

fix(agents): distinguish review routing from enforcement (#126216)

2026-08-20 23:47:14 -07:00

dependabot.yml

chore(deps): refresh repository dependencies (#112453)

2026-07-23 16:17:13 +00:00

labeler.yml

refactor(canvas): make the panel a widget presenter (#126030)

2026-08-19 08:21:07 -07:00

package-trusted-sources.json

fix: harden package URL downloads (#85578)

2026-05-23 17:28:29 +01:00

pull_request_template.md

docs: require maintainer edits on pull requests

2026-07-10 09:18:28 -05:00

retired-sticky-disks.json

ci: replace dependency sticky disk with exact cache (#123040)

2026-08-13 01:13:25 -07:00

zizmor.yml

chore(compat): date the annotated deprecation families and expose removal-pending debt (#114002)

2026-07-25 21:01:20 -07:00