This repository has been archived on 2026-08-04. You can view files and clone it, but cannot push or open issues or pull requests.

Adam Moussa 537e83975b Rewrite nightly sweep as two-tier clean-clone auto-discovery ... Replace the opt-in sweep-targets allowlist with zero-wiring discovery: enumerate org repos via the GitHub REST API (curl + read-only GH_TOKEN, no gh dependency) and mirror each as a shallow clean clone (git clone --depth=1, default branch from the API) into ~/repo-mirrors. Scanning server-side clones keeps local .env secrets out of scope. Tier 1 runs deterministic scanners over every repo nightly ($0 Claude); tier 2 runs the agentic pass over a budget-bounded round-robin rotation with a persistent cycle pointer, so the draw on the shared Max limits stays bounded and coverage never goes silently incomplete (COVERAGE ALARM if the rotation falls behind). Skip = committed marker or central list (marker-skips logged). Redact secrets from Slack; reports mode 600. Raise the systemd timeout to 6h for the longer two-tier run.		2026-06-16 15:00:00 -04:00
..
sea-haven-secrev.service	Rewrite nightly sweep as two-tier clean-clone auto-discovery	2026-06-16 15:00:00 -04:00
sea-haven-secrev.timer	Rewrite nightly sweep as two-tier clean-clone auto-discovery	2026-06-16 15:00:00 -04:00