gstack/cso
Garry Tan a8c295d49d
fix: address pre-landing review (codex) on the carve
- cso section: add a scope-gate header so '--owasp' (and other scoped modes)
  run only their selected phases, not every phase bundled in the section
  ('execute in full' no longer overrides Mode Resolution).
- carve-guard-checks: gateAfterStop now compares against the LAST STOP, not the
  first, so a gate stranded between two STOPs in a multi-STOP skeleton fails.
- TODOS: behavioral section-loading hermeticity (verifier matches global-install
  path, not the fixture) — pre-existing in auq-sdk-capture.ts, deferred.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-07 18:18:02 -07:00
..
sections fix: address pre-landing review (codex) on the carve 2026-06-07 18:18:02 -07:00
ACKNOWLEDGEMENTS.md feat: /cso v2 — infrastructure-first security audit (v0.11.6.0) (#384) 2026-03-23 06:57:22 -07:00
SKILL.md feat: carve cso into skeleton + on-demand section (security-safe) 2026-06-07 17:57:50 -07:00
SKILL.md.tmpl feat: carve cso into skeleton + on-demand section (security-safe) 2026-06-07 17:57:50 -07:00