feat(automation): run BandScope hourly NVIDIA NIM review repair - #817

Draft

seonghobae wants to merge 127 commits into

fix/hourly-nvidia-nim-review-repair-mainfrom

feat/bandscope-hourly-nvidia-nim-review-repair

Commits on Aug 5, 2026

test(automation): add hourly NIM repair contract workflow
seonghobae
committed
c464ebe
test(automation): require hourly bounded repair cadence
seonghobae
committed
2de9a0e
test(automation): require immutable scheduler source
seonghobae
committed
8dbbe58
test(automation): require NVIDIA NIM-only autofix boundary
seonghobae
committed
b02b4c9
fix(automation): enforce hourly NVIDIA NIM review repair
seonghobae
committed
dcbe70f
docs(automation): record hourly NIM repair boundary
seonghobae
committed
2349543
docs(changelog): record hourly NVIDIA NIM repair loop
seonghobae
committed
63b5022
test(automation): require hourly clearfolio target by default
seonghobae
committed
fa3b338
fix(automation): keep hourly scheduler target modular
seonghobae
committed
41f2e2a
fix(automation): default hourly repair target to clearfolio
seonghobae
committed
d10b57e
test(automation): require modular clearfolio hourly caller
seonghobae
committed
f2eb154
refactor(automation): keep scheduler reusable behind product caller
seonghobae
committed
f5836e4
feat(automation): schedule clearfolio review repair hourly
seonghobae
committed
2daf2da
test(automation): cover active clearfolio scheduler caller
seonghobae
committed
c8891d4
docs(automation): define modular clearfolio hourly caller
seonghobae
committed
112fd51
docs(changelog): record modular clearfolio heartbeat
seonghobae
committed
c590e55
test(automation): expose conflict autofix scope gap
seonghobae
committed
90074e6
docs(doctoring): record clearfolio scheduler caller boundary
seonghobae
committed
08ff6e0
test(automation): track clearfolio caller doctoring
seonghobae
committed
bc16ced
test(automation): align hourly cadence with modular caller
seonghobae
committed
94df8e3
fix(automation): add conflict repair scope verifier
seonghobae
committed
9512f8c
test(automation): require job-scoped caller permissions
seonghobae
committed
0c3bf4c
fix(automation): scope caller writes to scheduler job
seonghobae
committed
c61083c
test(automation): require conflict scope quality gate
seonghobae
committed
d441c36
docs(automation): record job-scoped caller authority
seonghobae
committed
33e68f4
docs(automation): define job-local scheduler permissions
seonghobae
committed
33fd551
ci(automation): repair conflict scope once
seonghobae
committed
f2d58b7
refactor(automation): remove unreachable path bound branch
seonghobae
committed
f1b0ac4
test(automation): preserve conflict-scope red evidence
seonghobae
committed
c9dd236
refactor(automation): remove unreachable JSON key branch
seonghobae
committed
8bb2e36
test(automation): complete conflict scope branch evidence
seonghobae
committed
ec40296
ci(automation): stage deterministic PR 782 repair helper
seonghobae
committed
0c40cbf
ci(automation): repair PR 782 finalizer workflow
seonghobae
committed
4f036e4
fix(automation): align one-shot conflict repair with final contract
seonghobae
committed
f205cea
chore(ci): trigger bounded PR 782 repair
seonghobae
committed
406d1f5
ci(automation): trigger verified PR 782 conflict-scope finalizer
seonghobae
committed
65f7672
ci: retrigger exact-head conflict-scope repair
seonghobae
committed
29d8bd5
ci(automation): trigger exact-head conflict-scope repair
seonghobae
committed
7316c5c
ci(automation): finalize conflict scope repair exactly once
seonghobae
committed
a9a235a
ci(automation): retrigger bounded conflict-scope repair
seonghobae
committed
aae2abf
ci(automation): finalize PR 782 from branch push
seonghobae
committed
0c386d4
ci(automation): finalize PR 782 on reopen
seonghobae
committed
60f8cf4
ci(automation): export exact PR 782 source
seonghobae
committed
31c2ed3
ci(automation): harden conflict-scope finalizer
seonghobae
committed
548f382
ci(automation): retrigger permanent conflict-scope repair
seonghobae
committed
25658c6
ci: finalize PR 782 conflict scope once
seonghobae
committed
ff9c94a
test(automation): stage verified conflict-scope repair
seonghobae
committed
5fd3ad0
ci: apply verified conflict-scope repair
seonghobae
committed
df61585
ci(automation): apply verified PR 782 source artifact
seonghobae
committed
0df85d2
ci(automation): apply reviewed PR 782 conflict-scope repair
seonghobae
committed
045d0e9
ci(automation): retry reviewed PR 782 conflict-scope repair
seonghobae
committed
5a919fb
fix(automation): enforce conflict repair write scope
github-actions[bot]
committed
2977e0c
chore(automation): remove completed PR 782 helpers
seonghobae
committed
cd5d00c
ci(review): publish PR 782 repair with workflow-capable token
seonghobae
committed
a37e4a9
chore(automation): remove verified PR 782 publisher
seonghobae
committed
402caf2
ci: finalize PR 782 path canonicalization
seonghobae
committed
b86cae4
fix(automation): reject alternate conflict path spellings
github-actions[bot]
committed
a1fe503
ci: remove completed PR 782 repair workflow
seonghobae
committed
4d69c58

Commits on Aug 6, 2026

fix(automation): keep Clearfolio caller schedule-only
seonghobae
committed
2f16cca

Commits on Aug 7, 2026

Merge branch 'main' into fix/hourly-nvidia-nim-review-repair-main
opencode-agent[bot]
authored
68414ff
test(security): reject PATH-hijacked git in conflict scope
seonghobae
committed
b5dd43a
fix(security): pin conflict-scope git executable
seonghobae
committed
93da6fd
test(security): reject conflict-scope PATH hijacking
seonghobae
committed
3fbe70d
ci(security): include conflict-scope Git boundary tests
seonghobae
committed
978d0e4
test(security): align trusted Git regressions with fixed path
seonghobae
committed
d9860ca
test(security): remove duplicate trusted Git regression file
seonghobae
committed
9444454
test(security): reject writable trusted Git binaries
seonghobae
committed
e5349cc
fix(security): reject writable trusted Git binaries
seonghobae
committed
295ef81
test(security): fail closed on unsafe symlink targets
seonghobae
committed
24d5004
fix(security): constrain symlink referents to tracked files
seonghobae
committed
6d0c75a
test(security): execute symlink target regressions
seonghobae
committed
8fd295a
test(security): cover symlink resolution failures
seonghobae
committed
f37f20c
test(security): assert conflict-scope errors redact sensitive detail
seonghobae
committed
ed69a29
fix(automation): report unauthorized path changes before symlink validation
seonghobae
committed
f1c8efe
test(automation): keep retargeted symlink fixture valid
seonghobae
committed
f2700ef
test(autofix): fail closed on ignored worktree changes
seonghobae
committed
22fbe43
test(autofix): execute ignored-path security regressions
seonghobae
committed
27ed963
fix(autofix): inventory ignored worktree paths
seonghobae
committed
2ebf19d
fix(autofix): preserve redacted symlink race handling
seonghobae
committed
e300a67
test(autofix): require ordinary write-scope isolation
seonghobae
committed
48c995c
test(autofix): pin privileged push destination
seonghobae
committed
6db9713
fix(autofix): enforce exact model write scope
seonghobae
committed
3e12430
test(autofix): scope conflict ordering assertion
seonghobae
committed
b68c85c
test(autofix): require exact write-scope documentation
seonghobae
committed
3b0e3a9
docs(autofix): record exact model write scope
seonghobae
committed
3386cca
docs(automation): explain exact repair write scope
seonghobae
committed
8081a18
docs(changelog): record exact autofix publication boundary
seonghobae
committed
d83bfff
test(autofix): reject review-body allowlist injection
seonghobae
committed
3b345d2
docs(autofix): keep ignored-path contract explicit
seonghobae
committed
1de55fd
fix(autofix): seal review path authorization
seonghobae
committed
269d57c
test(autofix): fail closed on symlink scan errors
seonghobae
committed
e8073dc
fix(autofix): fail closed on symlink scan errors
seonghobae
committed
a613a33
fix(autofix): consume sealed path authorization
seonghobae
committed
d854268
test(autofix): require sealed review-path authority
seonghobae
committed
14722c3
fix(autofix): seal structured review path authority
seonghobae
committed
edc59bd
fix(autofix): verify sealed allowed-path inventory
seonghobae
committed
ad72d9c
test(autofix): require context helper quality evidence
seonghobae
committed
a146c1a
test(autofix): execute context quality gate contract
seonghobae
committed
1f4858a
Merge branch 'main' into fix/hourly-nvidia-nim-review-repair-main
opencode-agent[bot]
authored
3a725a7
test(autofix): cover context authority in focused gate
seonghobae
committed
74cb8a1
fix(autofix): preserve context helper compatibility
seonghobae
committed
ba71e7a
test(autofix): cover context helper branches
seonghobae
committed
d1d7d44
test(autofix): reject whitespace path normalization
seonghobae
committed
c7ccbfb
fix(autofix): reject whitespace path normalization
seonghobae
committed
349236b
test(autofix): require complete repository regression suite
seonghobae
committed
5590c8b
ci(autofix): run complete exact-head test suite
seonghobae
committed
1ce6406
test(automation): define BandScope hourly repair caller contract
seonghobae
committed
4718b51
feat(automation): add BandScope hourly repair caller
seonghobae
committed
3c773f2
ci(automation): verify BandScope hourly repair caller
seonghobae
committed
a00cf7b
docs(automation): record BandScope hourly caller boundary
seonghobae
committed
edca4f9
docs(changelog): record BandScope hourly repair caller
seonghobae
committed
a628d4d
test(automation): bound BandScope quality-path assertions
seonghobae
committed
dbaa92e
test(automation): decouple focused compile target order
seonghobae
committed
2ecbd35
ci: repair hourly autofix push contract test
seonghobae
committed
e418e55
chore(automation): remove unauthorized one-shot branch writer
seonghobae
committed
3cb30a5
ci: harden hourly scheduler token permissions
seonghobae
committed
34e8e30
chore(automation): remove unauthorized one-shot branch writer
seonghobae
committed
1c13336
test(autofix): require explicit revalidated push target
seonghobae
committed
7444580
fix(automation): keep hourly caller token read-only
seonghobae
committed
4966d01
fix(automation): keep scheduler GitHub token read-only
seonghobae
committed
57b57d4
chore(automation): sync protected push contract from prerequisite
seonghobae
committed
47e138b
test(automation): require read-only scheduler token boundary
seonghobae
committed
b73e3f1
fix(automation): restore reusable scheduler job permissions
seonghobae
committed
254c698
fix(automation): remove scheduler caller token elevation
seonghobae
committed
673f090
docs(automation): align Clearfolio caller credential boundary
seonghobae
committed
16b2db2
docs(changelog): record read-only scheduler token boundary
seonghobae
committed
b921e26
feat(automation): reconcile BandScope hourly caller with current scheduler
seonghobae
committed
25b2109