All pull requests

Pull requests

• feat(core): give each finding a fingerprint that survives a move

  #299·jedzill4 opened Nov 11, 2026Collaborator·6/6·

  ·
  1

• docs(standards): review depth follows the risk of the diff

  #298·jedzill4 opened Nov 11, 2026Collaborator·5/6·

  ·
  1

• docs(adr): ADR 0019, the history of findings

  #297·jedzill4 opened Nov 11, 2026Collaborator·4/6·

  ·
  1

• docs(adr): ADR 0018, risk tiers from paths and a classifier that only raises them

  #296·jedzill4 opened Nov 10, 2026Collaborator·3/6·

  ·
  1

• docs(adr): a review role is a skill and a REVIEW.md that CI reads from the base branch

  #294·jedzill4 opened Nov 10, 2026Collaborator·2/6·

  ·
  1

• feat(skills): review skills by role, with review-panel to run them

  #293·jedzill4 opened Nov 10, 2026Collaborator·1/6·

  ·
  1

• chore: pins to the current releases

  #292·jedzill4 opened Nov 9, 2026Collaborator·

  ·
  1

• feat(standards): a test that a change adds fails on its base, with the recipe ci-tests-fail-on-base-python

  #264·jedzill4 opened Oct 28, 2026Collaborator·

  ·

• feat(standards): importing a module does no I/O, with the rule no-import-side-effects

  contract-change
  #258·jedzill4 opened Oct 28, 2026Collaborator·

  ·

• feat(standards): a change does not switch off a check without saying why, with the rule test-skip-reason

  contract-change
  #255·jedzill4 opened Oct 28, 2026Collaborator·

  ·

• feat(standards): a migration keeps the running version working and its downgrade undoes it, with the rules migration-drop-or-rename, migration-blocking-index and migration-irreversible

  contract-change
  #253·jedzill4 opened Oct 27, 2026Collaborator·

  ·

• feat(standards): a Next.js app loads its data and reads its secrets on the server, with the rules client-env-public-only, no-client-page and server-first-data

  #233·jedzill4 opened Oct 27, 2026Collaborator·

  ·

• feat(standards): a port has two adapters and a wrapper adds a step, with the rules port-has-two-adapters and no-pass-through

  #232·jedzill4 opened Oct 27, 2026Collaborator·

  ·

• docs(references): add the compose and compose-traefik topics

  #228·jedzill4 opened Oct 26, 2026Collaborator·

  ·

• feat(standards): Kubernetes workloads run without privileges and declare their resources and probes, with the k8s recipe and the rule k8s-workload-hardening

  contract-change
  #224·jedzill4 opened Oct 26, 2026Collaborator·

  ·