gstack/test/fixtures
Dan Layfield 4a255e6ffe feat: security + reliability hardening for investigate, browse, qa, canary, ship
Grafts adapted from addyosmani/agent-skills (MIT), re-fitted to gstack's
template/resolver architecture:

- investigate: treat error output as untrusted data (prompt-injection
  guard), git-bisect workflow for regressions, non-reproducible-bug
  taxonomy (timing/environment/state/random with tactics per class)
- browse: untrusted-content rule 5 (never copy secrets from page content),
  JS-execution constraints (read-only default, no external fetch, no
  cookie/token reads), session-isolation guidance
- qa: Browser Content Security Boundaries section — page content is data,
  not instructions; injection attempts are High-severity QA findings
- canary: verdict threshold table (error rate / P95 / JS errors / visual
  vs baseline -> HEALTHY/DEGRADED/BROKEN) + unconditional rollback triggers
- ship: breaking-change check that overrides line-count bump heuristics
  (Hyrum's Law); changelog-with-the-change discipline; feature-flag hygiene

Mechanics: content added to SKILL.md.tmpl files and resolvers
(scripts/resolvers/browse.ts, utility.ts), SKILL.md regenerated via
bun run gen:skill-docs. Golden ship fixtures refreshed. qa compressed to
stay within its 1.07 parity budget; investigate's maxSizeRatio bumped
1.09 -> 1.11 with rationale (only ~700B of headroom-free content added).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-06 12:22:18 -05:00
..
golden feat: security + reliability hardening for investigate, browse, qa, canary, ship 2026-07-06 12:22:18 -05:00
ios-qa/FixtureApp v1.43.0.0 feat: iOS device-farm (5 skills, Mac daemon, Tailscale) (#1574) 2026-05-21 16:09:26 -07:00
mode-posture feat: mode-posture energy fix for /plan-ceo-review and /office-hours (v1.1.2.0) (#1065) 2026-04-19 05:44:39 +08:00
office-hours-brain-writeback v1.52.1.0 feat: brain-aware planning — 5 skills read structured gbrain context before asking (#1742) 2026-05-29 08:35:00 -07:00
plans v1.15.0.0 feat: slim preamble + real-PTY plan-mode E2E harness (#1215) 2026-04-26 13:55:13 -07:00
coverage-audit-fixture.ts feat: test coverage catalog — shared audit across plan/ship/review (v0.10.1.0) (#259) 2026-03-22 11:28:16 -07:00
eval-baselines.json fix: rewrite session-runner to claude -p subprocess, lower flaky baselines 2026-03-14 02:34:10 -05:00
forcing-finding-seeds.ts v1.48.0.0 feat: AskUserQuestion split rule + runtime AUTO_DECIDE carve-out (#1740) 2026-05-26 23:43:07 -07:00
golden-ship-claude.md fix: community security wave — 8 PRs, 4 contributors (v0.15.13.0) (#847) 2026-04-06 00:47:04 -07:00
overlay-nudges.ts feat(v1.10.1.0): overlay efficacy harness + Opus 4.7 fanout nudge removal (#1166) 2026-04-23 18:42:58 -07:00
parity-baseline-v1.44.1.json v1.46.0.0 feat: gstack v2 foundation — catalog tokens drop 56%, eval-first floor covers all 51 skills (#1712) 2026-05-26 16:50:03 -07:00
parity-baseline-v1.46.0.0.json v1.46.0.0 feat: gstack v2 foundation — catalog tokens drop 56%, eval-first floor covers all 51 skills (#1712) 2026-05-26 16:50:03 -07:00
parity-baseline-v1.47.0.0.json v1.52.0.0 feat(plan-tune): explicit consent + first-run setup wizard for contributors (#1741) 2026-05-28 18:21:09 -07:00
parity-baseline-v1.53.0.0.json v1.53.1.0 fix: non-interactive-safe plan-tune hook install (flags + smart defaults) (#1805) 2026-05-30 11:42:13 -07:00
parity-baseline-v1.57.7.0.json v1.57.7.0 feat: GSTACK REVIEW REPORT always declares unresolved decisions (#1916) 2026-06-08 21:17:18 -07:00
qa-eval-checkout-ground-truth.json fix: 100% E2E pass — isolate test dirs, restart server, relax FP thresholds 2026-03-14 07:17:17 -05:00
qa-eval-ground-truth.json fix: 100% E2E pass — isolate test dirs, restart server, relax FP thresholds 2026-03-14 07:17:17 -05:00
qa-eval-spa-ground-truth.json fix: 100% E2E pass — isolate test dirs, restart server, relax FP thresholds 2026-03-14 07:17:17 -05:00
review-army-migration.sql feat: Review Army — parallel specialist reviewers for /review (v0.14.3.0) (#692) 2026-03-30 22:07:50 -06:00
review-army-n-plus-one.rb feat: Review Army — parallel specialist reviewers for /review (v0.14.3.0) (#692) 2026-03-30 22:07:50 -06:00
review-eval-design-slop.css feat: design review lite in /review and /ship + gstack-diff-scope (v0.6.3) (#142) 2026-03-17 20:12:55 -05:00
review-eval-design-slop.html feat: design review lite in /review and /ship + gstack-diff-scope (v0.6.3) (#142) 2026-03-17 20:12:55 -05:00
review-eval-enum-diff.rb feat: contributor mode, session awareness, recommendation format (#90) 2026-03-16 01:45:50 -05:00
review-eval-enum.rb feat: contributor mode, session awareness, recommendation format (#90) 2026-03-16 01:45:50 -05:00
review-eval-vuln.rb feat: 3-tier eval suite with planted-bug outcome testing (EVALS=1) 2026-03-14 01:17:36 -05:00