All pull requests

Pull requests

• feat: add CWE, CVSS base vector, and references to findings

  #90·zavxai opened Oct 21, 2026·

  ·
  1

• Remediation should name and preserve legitimate uses of the refused path

  #89·sarfaraz1212 opened Oct 21, 2026·

  ·
  1

• fix: allow checks in one attempt to share a promoted artifact

  #87·lab1207 opened Oct 21, 2026·

  ·

• Validate run-metadata.json against the documented run-state contract

  #85·mvanhorn opened Oct 20, 2026·

  ·
  1

• Reject in_progress units at terminal coverage validation

  #84·mvanhorn opened Oct 20, 2026·

  ·
  1

• docs: align completion gates and carried record validation

  #83·Dante-dan opened Oct 20, 2026·

  ·
  1

• fix: allow artifact sharing within an archived attempt

  #82·Dante-dan opened Oct 20, 2026·

  ·
  1

• Harden git and symlink handling for untrusted targets

  #76·alvessh opened Oct 13, 2026·

  ·

• Treat audited code as untrusted input, run the validators on Windows, add CI

  #75·oherbawi opened Oct 11, 2026·

  ·
  2

• feat: model shared validation blockers in findings

  #74·Dante-dan opened Oct 11, 2026·

  ·

• Allow multiple local checks in an archived attempt to share an artifact

  #70·ALANDVO opened Oct 7, 2026·

  ·

• refactor: organize skill into standard subdirectories (#56)

  #68·viwe-monai opened Oct 6, 2026·

  ·
  1

• security review skill

  #67·Beckleytobi opened Oct 4, 2026·

  ·

• docs: explain ZIP packaging for Claude app Skills upload

  #65·Dante-dan opened Oct 1, 2026·

  ·
  2

• Reject extra CLI arguments instead of validating only the first file

  #63·dharun-cohere opened Sep 28, 2026·

  ·

• Organize security audit skill into standard directories

  #62·dajiaohuang opened Sep 28, 2026·

  ·
  1

• Add sibling-Docker sandbox provisioning guide

  #60·coffeegrind123 opened Sep 28, 2026·

  ·

• Read validator CLI input safely on Windows

  #59·henrychen95 opened Sep 25, 2026·

  ·
  1

  1

• Add sequential fallback for unstable parallel agents

  #58·ghostzeronz-coder opened Sep 25, 2026·

  ·
  1

  1

• Keep config-dependent reachability as needs_validation, not hardening

  #50·jboiie opened Sep 20, 2026·2 of 3 tasks·

  ·

• Add validator environment doctor

  #49·ZhiHe-ma opened Sep 20, 2026·

  ·

• Validate retained coverage artifacts and fix platform-aware tests

  #48·ZhiHe-ma opened Sep 20, 2026·

  ·
  1

• Bound source line numbers from above

  #45·pucedoteth opened Sep 19, 2026·

  ·

• feat: cross-validate findings against the coverage ledger

  #44·cyberspace-cs opened Sep 19, 2026·

  ·

• README: state that dependency advisory/CVE coverage is out of scope

  #43·Kaushik2210 opened Sep 19, 2026·

  ·
  1