fix(ci): secure scanner and mirror provenance; reconcile impossible gates - #764

Open

hyperpolymath wants to merge 14 commits into

mainfrom

codex/science-ci-20260909

Commits on Sep 9, 2026

fix(ci): verify scanner sources and mirror hosts; test startup gates
hyperpolymath
committed
73856a8
fix(governance): pin helper code to a real commit and check path policy
hyperpolymath
committed
d746d46
fix(mirror): declare optional secrets for least-privilege callers
hyperpolymath
committed
0ec476f
test(ci): use Ruby and reject empty workflow fixtures
hyperpolymath
committed
953756f
docs(ci): document mirror trust configuration and pin tested helpers
hyperpolymath
committed
8e50188
fix(ci): address review findings in shared policy and mirror gates
hyperpolymath
committed
5ab3a28
fix(ci): consume the reviewed and tested policy helpers
hyperpolymath
committed
af24e41

Commits on Sep 10, 2026