Repository navigation

QA ONLY: R850 PR66 exact-head CodeQL 3/3 (DO NOT MERGE) - #1

Draft

GOD13emad wants to merge 189 commits into

mainfrom

audit/r057-gui-probe-codeql-source

Draft

QA ONLY: R850 PR66 exact-head CodeQL 3/3 (DO NOT MERGE)#1
GOD13emad wants to merge 189 commits into
mainfrom
audit/r057-gui-probe-codeql-source

Commits on Oct 14, 2026
Commits on Oct 15, 2026
Commits on Oct 16, 2026
Commits on Oct 17, 2026
Commits on Oct 18, 2026
Commits on Oct 19, 2026
- test(security): pin Root metadata and manifest reads to one fd (R776)
  Project QA Automation
  committed
  0a13693
- fix(security): retain native Root metadata-mode diagnostic (R777)
  Project QA Automation
  committed
  e7901c5
- fix(linux): pin protected Stage baseline backups before slot creation (R778)
  Project QA Automation
  committed
  93fce50
- fix(linux): execute Root upgrade only from SHA-pinned protected copies (R779)
  Project QA Automation
  committed
  c317831
- fix(linux): add fixed Root-owned bootstrap and exact manifest admission (R781)
  GOD13emad
  committed
  1fff246
- test(linux): preserve denied-Polkit fixture after trusted bootstrap split (R781)
  GOD13emad
  committed
  1dfc68c
- test(linux): verify trusted Root bootstrap on ephemeral GitHub VM (R782)
  GOD13emad
  committed
  a185186
- test(security): scope native Root fixture to fixed owned /run path (R782)
  GOD13emad
  committed
  a543819
- fix(linux): pin source and acceptance paths to one validated file descriptor (R783)
  GOD13emad
  committed
  4731ea9
- test(linux): retain native fail-closed parent receipt guard (R783)
  GOD13emad
  committed
  5c8cc9e
- test(linux): native fake receipt rejects unsafe parent before leaf (R783)
  GOD13emad
  committed
  ce9973c
- test(security): pin privileged CI fixture paths to owned GitHub-hosted locations (R784)
  GOD13emad
  committed
  03ae50b
- fix(linux): verify exact managed-provider user stage in privileged guard
  GOD13emad
  committed
  66ae0f1
- fix(security): bind Linux Root acceptance to fresh upgrade nonce (AI-assisted)
  GOD13emad
  committed
  1b3af38
- test(linux): refresh independent watchdog Root/Guard pins after nonce hardening
  GOD13emad
  committed
  bbab842
- test(linux): update R528 native Root candidate digest after nonce hardening
  GOD13emad
  committed
  878e14c
- refactor(security): unify pinned fd readers, remove racy pathname preflight (AI-assisted)
  GOD13emad
  committed
  e5726b0
- fix(security): validate pinned leaf basename before privileged fd open
  GOD13emad
  committed
  206dde4
- fix(security): restrict Root file-read leaf to literal approved names (AI-assisted)
  GOD13emad
  committed
  b38aa94
Commits on Oct 20, 2026
Commits on Oct 30, 2026
Commits on Oct 31, 2026

Commits

Commits on Oct 14, 2026

Commits on Oct 15, 2026

Commits on Oct 16, 2026

Commits on Oct 17, 2026

Commits on Oct 18, 2026