Audit remediation and production hardening - #8

Merged

fraware merged 19 commits into

mainfrom

remediation/audit-hardening

Jul 16, 2026

Commits on Jul 16, 2026

Add shared SpecSync types and confidence contracts.
fraware
committed
090b2c4
Add structured logger and metrics helpers.
fraware
committed
145a62a
Improve diff line mapping for review comment sides.
fraware
committed
55bae4b
Add command rate limiting for interactive AuthZ paths.
fraware
committed
4786f39
Queue PR analysis off the webhook request path.
fraware
committed
eec7fcc
Add durable spec store for accept, ignore, and edit.
fraware
committed
ee7fda3
Harden LLM client with mock policy and confidence norms.
fraware
committed
353e300
Strengthen AST extraction for multi-language targets.
fraware
committed
4c0aac2
Generate opaque Lean contracts with closed Nat proofs.
fraware
committed
ba73e32
Make coverage reporting honest with content digests.
fraware
committed
d1a4df5
Refactor spec analyzer around store, queue, and digests.
fraware
committed
bad5624
Harden GitHub UI Octokit paths and command AuthZ.
fraware
committed
724e343
Consolidate web dashboard and remove duplicate UI modules.
fraware
committed
994f368
Wire app entrypoint for queued analysis and drift handling.
fraware
committed
6088ac7
Align demos, UI principles, and Slack alerts with new APIs.
fraware
committed
8533579
Expand integration and fixture coverage for Probot flows.
fraware
committed
1d26bd5
Refresh VS Code extension for .specsync specs and proofs.
fraware
committed
f735c74
Strengthen CI with CodeQL, Lean, and Dependabot coverage.
fraware
committed
ac3d428
Document audit remediation and refresh deploy configuration.
fraware
committed
44a6a78

Navigation Menu

Uh oh!

Audit remediation and production hardening - #8

Audit remediation and production hardening#8
fraware merged 19 commits into
mainfrom
remediation/audit-hardening

Commits on Jul 16, 2026

Add shared SpecSync types and confidence contracts.

Add structured logger and metrics helpers.

Improve diff line mapping for review comment sides.

Add command rate limiting for interactive AuthZ paths.

Queue PR analysis off the webhook request path.

Add durable spec store for accept, ignore, and edit.

Harden LLM client with mock policy and confidence norms.

Strengthen AST extraction for multi-language targets.

Generate opaque Lean contracts with closed Nat proofs.

Make coverage reporting honest with content digests.

Refactor spec analyzer around store, queue, and digests.

Harden GitHub UI Octokit paths and command AuthZ.

Consolidate web dashboard and remove duplicate UI modules.

Wire app entrypoint for queued analysis and drift handling.

Align demos, UI principles, and Slack alerts with new APIs.

Expand integration and fixture coverage for Probot flows.

Refresh VS Code extension for .specsync specs and proofs.

Strengthen CI with CodeQL, Lean, and Dependabot coverage.

Document audit remediation and refresh deploy configuration.