You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Sanitize untrusted source/trigger (and GCS bucket/object) values before structured HTTP logs to close CodeQL log-injection (PR #39 review).
A2A tests wait on a worker completion threading.Event (wait_for_task) instead of a short busy-poll, so cold CI graph runs cannot false-timeout after ~2.5s (keeps the rate-limiter reset from the prior poll-budget fix).
A2A CI flake: test_a2a_task_create_status_and_sse waited only ~2.5s for the background graph; raise the poll budget to 30s, assert HTTP 200 on status polls, and clear/raise the in-process rate limiter for A2A tests.
Changed
Admin click-path checklist to activate the GitHub merge-protection ruleset (legacy main is disabled / empty targets): docs/PUBLIC-READINESS.md.
Canonical personas / audience model: docs/PERSONAS.md (Sam/Priya/Riley/Jordan primary; Casey/Alex secondary). Wiki who-tables, QUICKSTART, PRODUCT-UX, ROADMAP primary-persona tags, and OKF log aligned.
Documentation drift cleanup: canonical pytest count 95 (verify banner, wiki, OKF, README badge); distinguish CLI pii_findings=3 from gold PII flagged ≥ 4; publication identity is the public Apache-2.0 repo plus wiki and PDFs; A2A and sanitized OpenTelemetry marked proven in CI.