jason.woltje 1e65ff3f8b fix(org): applyPack requires the secret check on every write (starter packs SP3 security P2-1) ...

A board, workflow or pack write without assertClean now refuses
definition-secret-check-required, and the scan covers every key and
string in the plan before the writer reads any of it.

2026-11-12 15:30:07 -06:00

..

access-levels.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

access.test.mjs

fix(refusals): restore validated identifiers already shown by the system (#1873)

2026-11-10 23:16:26 -06:00

accounts.test.mjs

fix(organization): accounts config directory checks every ancestor (#1873)

2026-11-10 22:21:06 -06:00

agent-copies.test.mjs

feat(bus): copy launch gate CB3, verified bound copies only (#1873)

2026-11-12 13:37:46 -06:00

agent-identity.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

agent-levels-write.test.mjs

fix(agents): A2 review round: config check, name rule, drafts and test gaps (#1873)

2026-11-10 18:25:54 -06:00

agent-levels.test.mjs

fix(organization): keep var values out of refusals (#1873)

2026-11-10 21:21:36 +00:00

appearance.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

assistant.test.mjs

Merge refactor fbf2f6fc8 (rename stage B) into F2

2026-11-09 13:17:33 -06:00

autonomy-inverse.test.mjs

fix(org): enforce autonomy budgets and durable inverse boundaries (#1873)

2026-11-11 10:27:41 -06:00

autonomy.test.mjs

fix(autonomy): account quota coverage reads the harness module's countsAccount, not a name (#1873)

2026-11-11 13:39:44 -06:00

case1-business-file.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

case1-project-key.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

chief-library-credentials.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

chief-of-staff.test.mjs

feat(authority): resolve hire, fire and role changes through pinned human decisions (#1873)

2026-11-11 04:19:33 -06:00

cli.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873)

2026-11-11 08:53:31 -06:00

composition.test.mjs

feat(authority): resolve hire, fire and role changes through pinned human decisions (#1873)

2026-11-11 04:19:33 -06:00

copy-bindings.test.mjs

fix(org): copy binding review round, CB1 (#1873)

2026-11-11 14:27:08 -06:00

copy-grant-writer.test.mjs

feat(bus): copy credential issue CB2, Gitea verified live (#1873)

2026-11-11 17:13:04 -06:00

credentials.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

csuite.test.mjs

feat(organization): enforce arbiter domain resolve rights (#1873)

2026-11-10 16:33:21 -06:00

definitions.test.mjs

feat(authority): resolve hire, fire and role changes through pinned human decisions (#1873)

2026-11-11 04:19:33 -06:00

grant-scope.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

hard-waits.test.mjs

feat(organization): enforce arbiter domain resolve rights (#1873)

2026-11-10 16:33:21 -06:00

helpers.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

hire-decisions.test.mjs

fix(authority): close chief grant and root fire review gaps (#1873)

2026-11-11 04:19:33 -06:00

hosts.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

instance-credential-transitions.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

instance-settings.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873)

2026-11-11 08:53:31 -06:00

json-redaction.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

last-values.test.mjs

fix(refusals): restore validated identifiers already shown by the system (#1873)

2026-11-10 23:16:26 -06:00

launch-settings.test.mjs

fix(routes): name Disable only when it makes the save apply (P0-4 review)

2026-11-11 13:35:56 -06:00

library-projects-protected.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

library-seats.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

lifecycle-settings.test.mjs

feat(authority): resolve hire, fire and role changes through pinned human decisions (#1873)

2026-11-11 04:19:33 -06:00

optional-tracker.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

org-archive-fence.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

org-archive.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

org-delete.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

org-presets.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

org-registry.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

org-rights.test.mjs

feat(org): add per-class autonomy and guarded reversals (#1873)

2026-11-11 10:27:41 -06:00

org-service.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

organization-config.test.mjs

fix(organization,cli): refusals name the file by label, never by host path

2026-11-11 01:04:15 -06:00

path-redaction-labels.test.mjs

fix(cli,seat,discord,organization,control-board,harness,plugins,webui): review round: launcher reasons, session, discord reads, mosaic-config and keys by label (#1873)

2026-11-11 08:53:31 -06:00

path-redaction.test.mjs

feat(authority): resolve hire, fire and role changes through pinned human decisions (#1873)

2026-11-11 04:19:33 -06:00

plugin-settings.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

project-bootstrap.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

project-remotes.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

project-repo.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

project.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

proxy-launch.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

record-grants.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

refusal-redaction.test.mjs

fix: redact remaining file and config refusal echoes (#1873)

2026-11-10 17:06:54 -06:00

rename-b-identity.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

reply-limits.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

repo-remote.test.mjs

fix(org): repo set refuses under a copy binding that still grants the project (#1873 F7)

2026-11-12 13:39:26 -06:00

resolve-rights.test.mjs

fix(organization): validate narrowed arbiter resolve authority (#1873)

2026-11-10 16:51:03 -06:00

resolve.test.mjs

feat(harness): expose caller rails and refusal guidance (#1873)

2026-11-10 18:51:15 -06:00

role.test.mjs

feat(authority): resolve hire, fire and role changes through pinned human decisions (#1873)

2026-11-11 04:19:33 -06:00

safe-names.test.mjs

feat(authority): resolve hire, fire and role changes through pinned human decisions (#1873)

2026-11-11 04:19:33 -06:00

selector.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

spec-review-contracts.test.mjs

feat(harness): expose caller rails and refusal guidance (#1873)

2026-11-10 18:51:15 -06:00

starter-pack-keys.test.mjs

fix(org): applyPack requires the secret check on every write (starter packs SP3 security P2-1)

2026-11-12 15:30:07 -06:00

system-type.test.mjs

feat(plugins,organization): system types as a plug-in kind (REQ-SYS-1, #1873)

2026-11-09 18:46:35 -06:00

token-limit-settings.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

var-redaction.test.mjs

test(organization): pin route refusal variable names (#1873)

2026-11-10 21:21:36 +00:00

vars.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00

workflow-roles.test.mjs

organization: move packages/business to packages/organization (rename r2 stage B1)

2026-11-09 11:47:48 -06:00