Jason WoltjeandClaude Fable 5 a54d539eb3 fix(wake): #941 review §2 — snapshot_ts hardening: sha precondition, epoch sanity, future-skew rejection ...

A ts without a valid sha is unverifiable dating — dropped loudly. A future
ts yields a negative age (stale reads fresher-than-fresh, the failure class
this PR exists to fix) — rejected beyond WAKE_SNAPSHOT_TS_FUTURE_SLACK
(default 300s). Epoch sanity (^[0-9]{1,12}$) is validated BEFORE the shell
integer comparison so an absurd value cannot error past the guard. All three
paths covered by new D12. Manifest now records that snapshot_* absence is
deliberately not diagnostic (reviewer observation, PR #941 comment 19475).

Co-Authored-By: Claude Fable 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01NsKce8iZuSuRnu3gVMCBKB

2026-07-30 05:42:01 -05:00

..

_lib

feat(mosaic): manifest-owned upgrade guard so updates never wipe operator config (#791) (#802)

2026-07-16 23:01:26 +00:00

_scripts

feat(869-c2): install-ordering enforcement-hook guard (Part of #869)

2026-07-23 18:48:33 +00:00

authentik

feat(framework): P1+P2 — public sanitization + blocking CI gate (#572)

2026-06-21 02:40:11 +00:00

bootstrap

feat(framework): P1+P2 — public sanitization + blocking CI gate (#572)

2026-06-21 02:40:11 +00:00

cicd

feat: integrate framework files into monorepo under packages/mosaic/framework/

2026-04-01 21:19:21 -05:00

cloudflare

feat: integrate framework files into monorepo under packages/mosaic/framework/

2026-04-01 21:19:21 -05:00

codex

fix: fetch actual Gitea PR head for Codex reviews (#815)

2026-07-17 19:44:56 +00:00

context

feat: integrate framework files into monorepo under packages/mosaic/framework/

2026-04-01 21:19:21 -05:00

coolify

feat(framework): P1+P2 — public sanitization + blocking CI gate (#572)

2026-06-21 02:40:11 +00:00

excalidraw

feat: integrate framework files into monorepo under packages/mosaic/framework/

2026-04-01 21:19:21 -05:00

fleet

feat(fleet): enforce generated environment boundary (#772)

2026-07-15 08:40:32 +00:00

git

fix(framework): pr-review.sh -r/--repo + -H/--host overrides + UA + repo preflight (Patches 5/5c) (#896)

2026-07-25 22:08:08 +00:00

glpi

fix(glpi): accept HTTP 206 in list wrappers (#807) (#810)

2026-07-16 22:47:58 +00:00

health

feat(framework): P0 — MIT license + executable-leak sanitization (#570)

2026-06-21 01:43:49 +00:00

lease-broker

feat(869-c4): activation version-coupling assertion (Part of #869)

2026-07-23 19:07:27 +00:00

orchestrator

fix(ci-queue-wait): treat absent branch (404) as queue-clear (#872)

2026-07-23 17:08:57 +00:00

orchestrator-matrix

feat(mosaic): WI-2 mutator-class guard for directive-freshness (#837)

2026-07-18 05:51:58 +00:00

portainer

feat(mosaic-portainer): PORTAINER_INSECURE flag for self-signed TLS (#484)

2026-04-22 01:21:54 +00:00

prdy

feat(mosaic): WI-2 mutator-class guard for directive-freshness (#837)

2026-07-18 05:51:58 +00:00

qa

fix(framework): install deps on worktree bootstrap + legible deps-preflight at gate seam (#856) (#858)

2026-07-20 09:38:12 +00:00

quality

feat(mosaic): durable pre-update snapshot + verify net + restore CLI (#791 PR2) (#811)

2026-07-17 00:43:18 +00:00

tmux

fix(framework): send-message.sh fail-loud submission verdict + regression tests (Patch 6) (#895)

2026-07-25 22:57:11 +00:00

wake

fix(wake): #941 review §2 — snapshot_ts hardening: sha precondition, epoch sanity, future-skew rejection

2026-07-30 05:42:01 -05:00

woodpecker

feat(framework): P1+P2 — public sanitization + blocking CI gate (#572)

2026-06-21 02:40:11 +00:00