Vincent Koc 2ce4a7483a fix(ci): use workflow revision for proof checks ...

Checkout the trusted workflow revision for the Real behavior proof gate so old PR events with stale base SHAs can still run the current checker scripts.

Proof:
- `tbx_01kvrrqq6tnwee3r41p22sy0qk`: touched-file format check passed.
- `tbx_01kvrrqq6tnwee3r41p22sy0qk`: `corepack pnpm test:serial test/scripts/ci-workflow-guards.test.ts` passed.
- `tbx_01kvrrqq6tnwee3r41p22sy0qk`: `corepack pnpm check:changed` passed for tooling.
- PR CI passed with no failing or pending checks.

2026-06-23 07:11:23 +08:00

..

actions

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

codeql

chore(deadcode): prune stale codeql paths

2026-06-22 08:33:19 +08:00

codex/prompts

docs: make changelog release-owned

2026-05-25 19:15:37 +01:00

images/live-media-runner

ci: preinstall ffmpeg for live media checks

2026-04-29 03:48:33 +01:00

instructions

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

ISSUE_TEMPLATE

meta(issue-template): add dedicated docs bug report form

2026-06-22 20:52:50 +08:00

workflows

fix(ci): use workflow revision for proof checks

2026-06-23 07:11:23 +08:00

actionlint.yaml

ci: pin macOS runner labels

2026-05-28 20:52:52 +02:00

CODEOWNERS

ci: add security-sensitive file guard

2026-06-17 12:50:18 +02:00

dependabot.yml

chore: move swabble into apps

2026-05-03 13:10:25 +01:00

labeler.yml

feat(raft): add wake bridge channel

2026-06-22 14:36:12 +08:00

package-trusted-sources.json

fix: harden package URL downloads (#85578)

2026-05-23 17:28:29 +01:00

pull_request_template.md

improve: simplify PR context and evidence (#94676)

2026-06-19 14:00:38 -06:00

zizmor.yml

chore: reduce root cleanup files

2026-05-03 14:38:13 +01:00