You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Fixed
Require operator-sealed begin-review manifests before strict review output can claim VERIFIED_CHANGE; self-declared or after-the-fact baselines now remain MECHANICALLY_VERIFIED.
Reject symlinked baseline inputs before content hashing/parsing by reading baseline evidence through no-follow descriptor validation.
Report detached_descendant_possible: true with isolation: process-group-only, avoiding overclaims about process containment.
Treat transient Windows lock-create PermissionError as a busy cooperative lock so concurrent Project Memory writers retry instead of dropping an update.
Verification
Local: make check passed (92 tests, 1 skipped).
GitHub Actions for PR #2 passed: Linux Python 3.11, 3.12, 3.13, 3.14; Portable contracts on macOS and Windows; Codex CLI contracts.