This repository has been archived on 2026-08-04. You can view files and clone it, but cannot push or open issues or pull requests.

Adam Moussa c4bea7270b harden(agent-team): fold C1 cross-review MEDIUMs into p3_rollback.sh ... GPT-4.1 cross-family review (APPROVE, no critical/high) raised two MEDIUMs on the rollback tooling; addressed both: - require_keys: each restore_* asserts its required baseline keys up front and refuses a PARTIAL (silently-weaker) restore. environment accepts ids OR logins (equivalent); a missing protection.full now REFUSES the enforce_admins-only degrade unless P3_ROLLBACK_ALLOW_PARTIAL=1 is set (loud DEGRADED warning). - out-of-band ACK: an --apply that needs a MANUAL App neutralise (no APP JWT, or action=out-of-band) refuses unless P3_ROLLBACK_OOB_ACK=1 — so the App is never left un-neutralised without a conscious operator sign-off; with the ack the other surfaces still restore. Documented both env vars in usage. +3 tests (required-key refuse, partial-protection ack, oob ack). Suite: 1362 passed, ruff clean.		2026-06-23 19:52:04 -04:00
..
assert_no_write_token.py	feat(agent-team): P3 Phases A/B/E — safety tooling, wiring, docs	2026-06-23 19:52:04 -04:00
deploy-r720-ws-rollout.sh	docs(agent-team): install/run notes for the read-only status dashboard	2026-06-23 15:53:04 -04:00
deploy-r720.sh	feat(agent-team): generalized SAFE deploy-r720.sh (whole-package rsync, snapshot-gate, verify-after)	2026-06-23 15:51:28 -04:00
p3_rollback.sh	harden(agent-team): fold C1 cross-review MEDIUMs into p3_rollback.sh	2026-06-23 19:52:04 -04:00