Skip to content

Add daily upstream-sweep routine and three rounds of hardening #29

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
JimCollinson merged 6 commits into from
May 11, 2026
Merged

Add daily upstream-sweep routine and three rounds of hardening #29

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
a6bce6b
Add daily upstream-sweep routine: scanner, prompt, policy, required c…
claude May 4, 2026
e5869c5
Harden upstream-sweep routine for v1.1: prose-guard, pinned deps, loc…
claude May 5, 2026
7b23c92
Add core hardening fixes to upstream-sweep guards and routine
claude May 8, 2026
ddeb45a
Harden upstream-sweep guards and routine
claude May 9, 2026
8c541eb
Tighten upstream-sweep type and shape checks (review pass 4)
claude May 9, 2026
d56e878
Scope every audit git command to $TMP
claude May 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
589 changes: 589 additions & 0 deletions .github/workflows/prose-guard.yml
View file
Open in desktop

Large diffs are not rendered by default.

510 changes: 510 additions & 0 deletions .github/workflows/sweep-guard.yml
View file
Open in desktop

Large diffs are not rendered by default.

384 changes: 384 additions & 0 deletions .github/workflows/sweep-sha-reachability.yml
View file
Open in desktop

Large diffs are not rendered by default.

310 changes: 310 additions & 0 deletions planning/routines/upstream-sweep-prompt.md
View file
Open in desktop

Large diffs are not rendered by default.

302 changes: 302 additions & 0 deletions planning/routines/upstream-sweep.md
View file
Open in desktop

Large diffs are not rendered by default.

7 changes: 7 additions & 0 deletions scripts/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,7 @@
# Used by scripts/sweep_poll.py for local + routine runs.
# .github/workflows/sweep-guard.yml, prose-guard.yml, and
# sweep-sha-reachability.yml duplicate this pin literally as
# pip install 'PyYAML>=6,<7'
# to avoid installing from a PR-controlled file. If you change the pin here,
# update those workflow YAMLs in the same PR.
PyYAML>=6,<7
Loading