feat(acp): enforce deterministic agent git commit identity - #6177

Open

wpfleger96 wants to merge 37 commits into

mainfrom

wpfleger/deterministic-agent-commit-identity

Commits on Aug 17, 2026

feat(acp): enforce deterministic agent git commit identity

Duncan
and
wpfleger96
committed
0ebb2a7

Commits on Aug 18, 2026

fix(acp): close push-gate alias/-C bypasses and keyfile teardown race

Duncan
and
wpfleger96
committed
14afcc2
fix(acp): make agent git identity authoritative and fail-closed

Duncan
and
wpfleger96
committed
079a82c
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
fb21fd1
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
f2f6d29
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
38aa021
fix(acp): close review findings on agent commit-identity enforcement

Duncan
and
wpfleger96
committed
db8e45b
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
6e80027

Commits on Aug 19, 2026

fix(git-identity): reject config-introducing git aliases in wrapper

Duncan
and
wpfleger96
committed
f8acf92
fix(git-identity): invert alias guard to an allowlist and refuse all shell aliases

Duncan
and
wpfleger96
committed
7abb86a
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
08715a7
fix(git-identity): hold expanded alias commands to the direct-command policy

Duncan
and
wpfleger96
committed
d963fdb
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
68e9658
fix(git-identity): fail closed at alias resolution limit

Duncan
and
wpfleger96
committed
ac5cdea

Commits on Aug 21, 2026

feat(acp): add BUZZ_GIT_IDENTITY toggle for agent vs user commit identity

Duncan
and
wpfleger96
committed
4cc7339
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
17d50d7
fix(acp): stage canonical key in user mode for the shim credential helper

Duncan
and
wpfleger96
committed
2dfbebc
fix(acp): honor per-agent BUZZ_GIT_IDENTITY over global process env

Duncan
and
wpfleger96
committed
f394b65
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
c44f02a
test(acp): restore BUZZ_GIT_IDENTITY on drop in persona-precedence test

Duncan
and
wpfleger96
committed
c64e62e

Commits on Aug 25, 2026

fix(desktop): reserve GIT_CONFIG* env family from user overrides

Duncan
and
wpfleger96
committed
83397e4
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
adae0af

Commits on Aug 26, 2026

Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
b444b35
feat(git-identity): require agent signature on outgoing commits at push gate
Duncan
committed
fef90de
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
d157e94
fix(git-identity): fail closed on tampered signing contract in manifest

Duncan
and
wpfleger96
committed
96e2378
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
f106994
fix(git-identity): validate exact canonical manifest contract, reject dup/unknown keys

Duncan
and
wpfleger96
committed
5864ccb
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
56a4543
fix(git-identity): compare fixed manifest values byte-for-byte

Duncan
and
wpfleger96
committed
f2389c4
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
cd23ed1

Commits on Aug 27, 2026

fix(git-identity): honor keyless passthrough and headless relay auth

Duncan
and
wpfleger96
committed
896cc04
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
313e7a1
test(acp): isolate credential-helper gate test from ambient GIT_CONFIG

Duncan
and
wpfleger96
committed
ba05511
fix(git-identity): resolve alias probes under caller config to close smuggling

Duncan
and
wpfleger96
committed
6fce487
fix(git-identity): probe aliases under the caller's complete global set

Duncan
and
wpfleger96
committed
c58076a
fix(git-identity): add --shallow-file to the global-grammar table

Duncan
and
wpfleger96
committed
e8cb5da