[workflow-audit] 26 unexplained change(s) on 2026-08-27

26 unexplained commit(s) in the audit window (`.github/workflows/ .config/tend.yaml .github/audit/ .vscode/`) since `2026-08-26T07:55:07Z`.

Routine Renovate pin bumps and reproducible tend regenerations are
classified and omitted — see the run summary for what was skipped.
Everything below needs a human to account for it.

### `0039b15` — ci: guard the last retry sleep so the stated worst case is the real one

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-27 01:22:10 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/ci.yml`
- [View diff](https://github.com/diffplug/dormouse/commit/0039b15423bf1ff7dfefdc4bc3feb7ec561ff2ad)

### `0dfa1e3` — security(audit): fold in what #449, #450 and #451 found

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 18:29:53 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/audit/supply-chain.md`
- [View diff](https://github.com/diffplug/dormouse/commit/0dfa1e3272359b6f6ca9302dccabd26970ddce55)

### `19122fd` — ci(standalone): correct the apt worst case to 945s (three sleeps, not two)

- **Author:** dormouse-bot <287024035+dormouse-bot@users.noreply.github.com> (self-declared; not proof of origin)
- **Date:** 2026-08-27 08:26:01 +0000
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/ci.yml`
- [View diff](https://github.com/diffplug/dormouse/commit/19122fd0be047bed3811aaaa9a19333aff488b79)

### `1e3c952` — security(audit): own the repository by subtraction, not by a list

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 11:52:49 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/audit/application-security.md`
  - `.github/audit/ci-and-secrets.md`
  - `.github/audit/supply-chain.md`
  - `.github/workflows/workflow-audit.yaml`
- [View diff](https://github.com/diffplug/dormouse/commit/1e3c9522fc11e13622b6ed0b3e947a3a99c95c53)

### `1f2f69f` — docs(security): qualify website/package.json in the supply-chain build-config list

- **Author:** dormouse-bot <287024035+dormouse-bot@users.noreply.github.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 19:32:35 +0000
- **Refs:** remotes/origin/docs/security-scope-enumerations
- **Files:**
  - `.github/audit/supply-chain.md`
- [View diff](https://github.com/diffplug/dormouse/commit/1f2f69fd93bbf7b4730d80f76e68e064f98e547f)

### `4046247` — fix(workflow-audit): name .github/audit/ in the report and empty-window text

- **Author:** dormouse-bot <287024035+dormouse-bot@users.noreply.github.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 19:21:28 +0000
- **Refs:** remotes/origin/fix/workflow-audit-audit-prompt-attribution
- **Files:**
  - `.github/workflows/workflow-audit.yaml`
- [View diff](https://github.com/diffplug/dormouse/commit/4046247ec17d9f6b21f7ae7ff3730099fbb7b485)

### `4353ec7` — security(audit): separate recording a condition from deciding the verdict

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 22:11:58 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/security-audit.yaml`
- [View diff](https://github.com/diffplug/dormouse/commit/4353ec75e45d0245f152b0ac6723d6ce326d784d)

### `47b1779` — security: derive the classifier window, and record that tend shipped the fix

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 14:05:49 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/workflow-audit.yaml`
- [View diff](https://github.com/diffplug/dormouse/commit/47b1779b6b9a4f09826fad7e21345b9c6c1a4475)

### `47d01c9` — security(audit): let a dissent outrank a missing fragment

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 21:44:54 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/security-audit.yaml`
  - `.github/workflows/workflow-audit.yaml`
- [View diff](https://github.com/diffplug/dormouse/commit/47d01c98c6d92c5b72b8f0131d52572136794f5d)

### `527f988` — ci(standalone): give the smoketest's apt step a budget that outlasts its retries (#454)

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-27 07:39:55 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/ci.yml`
- [View diff](https://github.com/diffplug/dormouse/commit/527f988231b481b64ea01c1d782129a7e98189d1)

### `54b9293` — ci: install zsh so the shell-integration tests actually cover it

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-27 00:41:13 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/ci.yml`
- [View diff](https://github.com/diffplug/dormouse/commit/54b92931ce3e5d8f143d7cac97f7406c336b46c9)

### `5ab8cce` — ci(standalone): give the smoketest's apt step a budget that outlasts its retries

- **Author:** dormouse-bot <287024035+dormouse-bot@users.noreply.github.com> (self-declared; not proof of origin)
- **Date:** 2026-08-27 08:19:12 +0000
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/ci.yml`
- [View diff](https://github.com/diffplug/dormouse/commit/5ab8cce807e354b4453847c6db8ee6a53b9dc82d)

### `5b7ea04` — docs(security): name every dotfile directory in the audit scopes, and dormouse-lib as a root

- **Author:** dormouse-bot <287024035+dormouse-bot@users.noreply.github.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 19:02:39 +0000
- **Refs:** remotes/origin/docs/security-scope-enumerations
- **Files:**
  - `.github/audit/application-security.md`
  - `.github/audit/ci-and-secrets.md`
- [View diff](https://github.com/diffplug/dormouse/commit/5b7ea046379012181ecb65ff0ea093ad1aff187b)

### `60ebf67` — security(audit): report conditions, not combinations

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 22:00:53 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/security-audit.yaml`
- [View diff](https://github.com/diffplug/dormouse/commit/60ebf67f79f02292e8931f956566f562f66904bf)

### `62848c7` — security(audit): give the unreadable-verdict case its own issue prose

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 19:53:41 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/security-audit.yaml`
- [View diff](https://github.com/diffplug/dormouse/commit/62848c7a05b0d265fc26b7f0f5151ed6c42b7221)

### `6a208e3` — security(standalone): make session snapshots owner-only

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 19:13:43 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/audit/application-security.md`
- [View diff](https://github.com/diffplug/dormouse/commit/6a208e3b61e3d5be6ae3393961bc3a88cc15777d)

### `6c9aec7` — fix(security): address the four review notes on #453

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-27 00:48:01 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/ci.yml`
- [View diff](https://github.com/diffplug/dormouse/commit/6c9aec7adde892dc59ee34a801b5edd6b1895bf7)

### `905b7b5` — security(audit): run application-security on Opus, and make a domain's verdict binding

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 18:27:21 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/audit/_preamble.md`
  - `.github/audit/orchestrator.md`
  - `.github/workflows/security-audit.yaml`
  - `.github/workflows/workflow-audit.yaml`
- [View diff](https://github.com/diffplug/dormouse/commit/905b7b54eb22432901194d7aba1d21d90b22c5e2)

### `a1bd66a` — ci: give the zsh install a budget that outlasts its own retries

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-27 01:15:56 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/ci.yml`
- [View diff](https://github.com/diffplug/dormouse/commit/a1bd66a421d3ed419d807241d536071bfb20e992)

### `a3d98e1` — docs(security): give supply-chain all of website/ except public/

- **Author:** dormouse-bot <287024035+dormouse-bot@users.noreply.github.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 19:13:44 +0000
- **Refs:** remotes/origin/docs/security-scope-enumerations
- **Files:**
  - `.github/audit/supply-chain.md`
- [View diff](https://github.com/diffplug/dormouse/commit/a3d98e10b5972716ceee960f5e41d5dedef44b9a)

### `ae3f015` — ci: stop the apt warning promising a retry that does not happen

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-27 01:27:44 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/ci.yml`
- [View diff](https://github.com/diffplug/dormouse/commit/ae3f015311309fa4c9f6739687c2b847972a79bd)

### `c0af617` — security(remote): evict the pairing record, not just its payload

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 19:35:43 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/security-audit.yaml`
- [View diff](https://github.com/diffplug/dormouse/commit/c0af61778dc4e53dbcb64380886008aa75b0e43c)

### `e66feee` — security: fix three claims the audit proved wrong

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 13:16:55 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/audit/application-security.md`
- [View diff](https://github.com/diffplug/dormouse/commit/e66feeec1120163fad017fd67a4e55a6f6115fc7)

### `e7dc783` — security(workflow-audit): make the widened window reach every consumer

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 13:48:38 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/workflows/workflow-audit.yaml`
- [View diff](https://github.com/diffplug/dormouse/commit/e7dc78340dd8cb98c56cf9d1486f7ef1d85ae6ec)

### `f254bc4` — fix(workflow-audit): report commits that only touch .github/audit/

- **Author:** dormouse-bot <287024035+dormouse-bot@users.noreply.github.com> (self-declared; not proof of origin)
- **Date:** 2026-08-26 19:15:22 +0000
- **Refs:** remotes/origin/fix/workflow-audit-audit-prompt-attribution
- **Files:**
  - `.github/workflows/workflow-audit.yaml`
- [View diff](https://github.com/diffplug/dormouse/commit/f254bc471c0d2db7248faa0889b2f2d0fd903f78)

### `fcca569` — security(host): stop the iframe proxy vouching for strangers, and name the rule

- **Author:** Ned Twigg <ned.twigg@diffplug.com> (self-declared; not proof of origin)
- **Date:** 2026-08-27 00:31:26 -0700
- **Refs:** main,remotes/origin/fix/scrollback-resurrect-after-kill remotes/origin/main
- **Files:**
  - `.github/audit/application-security.md`
- [View diff](https://github.com/diffplug/dormouse/commit/fcca56910b4f1dce55883e8d1a179751bac196e4)



Navigation Menu

Uh oh!

[workflow-audit] 26 unexplained change(s) on 2026-08-27 #456

`0039b15` — ci: guard the last retry sleep so the stated worst case is the real one

`0dfa1e3` — security(audit): fold in what #449, #450 and #451 found

`19122fd` — ci(standalone): correct the apt worst case to 945s (three sleeps, not two)

`1e3c952` — security(audit): own the repository by subtraction, not by a list

`1f2f69f` — docs(security): qualify website/package.json in the supply-chain build-config list

`4046247` — fix(workflow-audit): name .github/audit/ in the report and empty-window text

`4353ec7` — security(audit): separate recording a condition from deciding the verdict

`47b1779` — security: derive the classifier window, and record that tend shipped the fix

`47d01c9` — security(audit): let a dissent outrank a missing fragment

`527f988` — ci(standalone): give the smoketest's apt step a budget that outlasts its retries (#454)

`54b9293` — ci: install zsh so the shell-integration tests actually cover it

`5ab8cce` — ci(standalone): give the smoketest's apt step a budget that outlasts its retries

`5b7ea04` — docs(security): name every dotfile directory in the audit scopes, and dormouse-lib as a root

`60ebf67` — security(audit): report conditions, not combinations

`62848c7` — security(audit): give the unreadable-verdict case its own issue prose

`6a208e3` — security(standalone): make session snapshots owner-only

`6c9aec7` — fix(security): address the four review notes on #453

`905b7b5` — security(audit): run application-security on Opus, and make a domain's verdict binding

`a1bd66a` — ci: give the zsh install a budget that outlasts its own retries

`a3d98e1` — docs(security): give supply-chain all of website/ except public/

`ae3f015` — ci: stop the apt warning promising a retry that does not happen

`c0af617` — security(remote): evict the pairing record, not just its payload

`e66feee` — security: fix three claims the audit proved wrong

`e7dc783` — security(workflow-audit): make the widened window reach every consumer

`f254bc4` — fix(workflow-audit): report commits that only touch .github/audit/

`fcca569` — security(host): stop the iframe proxy vouching for strangers, and name the rule

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Uh oh!

[workflow-audit] 26 unexplained change(s) on 2026-08-27 #456

Description

0039b15 — ci: guard the last retry sleep so the stated worst case is the real one

0dfa1e3 — security(audit): fold in what #449, #450 and #451 found

19122fd — ci(standalone): correct the apt worst case to 945s (three sleeps, not two)

1e3c952 — security(audit): own the repository by subtraction, not by a list

1f2f69f — docs(security): qualify website/package.json in the supply-chain build-config list

4046247 — fix(workflow-audit): name .github/audit/ in the report and empty-window text

4353ec7 — security(audit): separate recording a condition from deciding the verdict

47b1779 — security: derive the classifier window, and record that tend shipped the fix

47d01c9 — security(audit): let a dissent outrank a missing fragment

527f988 — ci(standalone): give the smoketest's apt step a budget that outlasts its retries (#454)

54b9293 — ci: install zsh so the shell-integration tests actually cover it

5ab8cce — ci(standalone): give the smoketest's apt step a budget that outlasts its retries

5b7ea04 — docs(security): name every dotfile directory in the audit scopes, and dormouse-lib as a root

60ebf67 — security(audit): report conditions, not combinations

62848c7 — security(audit): give the unreadable-verdict case its own issue prose

6a208e3 — security(standalone): make session snapshots owner-only

6c9aec7 — fix(security): address the four review notes on #453

905b7b5 — security(audit): run application-security on Opus, and make a domain's verdict binding

a1bd66a — ci: give the zsh install a budget that outlasts its own retries

a3d98e1 — docs(security): give supply-chain all of website/ except public/

ae3f015 — ci: stop the apt warning promising a retry that does not happen

c0af617 — security(remote): evict the pairing record, not just its payload

e66feee — security: fix three claims the audit proved wrong

e7dc783 — security(workflow-audit): make the widened window reach every consumer

f254bc4 — fix(workflow-audit): report commits that only touch .github/audit/

fcca569 — security(host): stop the iframe proxy vouching for strangers, and name the rule

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

`0039b15` — ci: guard the last retry sleep so the stated worst case is the real one

`0dfa1e3` — security(audit): fold in what #449, #450 and #451 found

`19122fd` — ci(standalone): correct the apt worst case to 945s (three sleeps, not two)

`1e3c952` — security(audit): own the repository by subtraction, not by a list

`1f2f69f` — docs(security): qualify website/package.json in the supply-chain build-config list

`4046247` — fix(workflow-audit): name .github/audit/ in the report and empty-window text

`4353ec7` — security(audit): separate recording a condition from deciding the verdict

`47b1779` — security: derive the classifier window, and record that tend shipped the fix

`47d01c9` — security(audit): let a dissent outrank a missing fragment

`527f988` — ci(standalone): give the smoketest's apt step a budget that outlasts its retries (#454)

`54b9293` — ci: install zsh so the shell-integration tests actually cover it

`5ab8cce` — ci(standalone): give the smoketest's apt step a budget that outlasts its retries

`5b7ea04` — docs(security): name every dotfile directory in the audit scopes, and dormouse-lib as a root

`60ebf67` — security(audit): report conditions, not combinations

`62848c7` — security(audit): give the unreadable-verdict case its own issue prose

`6a208e3` — security(standalone): make session snapshots owner-only

`6c9aec7` — fix(security): address the four review notes on #453

`905b7b5` — security(audit): run application-security on Opus, and make a domain's verdict binding

`a1bd66a` — ci: give the zsh install a budget that outlasts its own retries

`a3d98e1` — docs(security): give supply-chain all of website/ except public/

`ae3f015` — ci: stop the apt warning promising a retry that does not happen

`c0af617` — security(remote): evict the pairing record, not just its payload

`e66feee` — security: fix three claims the audit proved wrong

`e7dc783` — security(workflow-audit): make the widened window reach every consumer

`f254bc4` — fix(workflow-audit): report commits that only touch .github/audit/

`fcca569` — security(host): stop the iframe proxy vouching for strangers, and name the rule