Skip to content

track: 2026-08-12 — 39 tracked, 44 case-study ready, 2 rule-adopted #851

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
xiaolai wants to merge 1 commit into
base: main
Choose a base branch
from
Open

track: 2026-08-12 — 39 tracked, 44 case-study ready, 2 rule-adopted #851

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions auditor/disagreements.jsonl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -232,6 +232,8 @@
{"event": "downstream_suppression", "timestamp": "2026-08-09T00:08:14Z", "repo": "xiaolai/cc-suite", "commit_sha": "6d02d7540acba055eda79c8355e85275a0451a3d", "rule_id": "R31", "suppression_type": "threshold_adjustment", "fingerprint": "sha256:479c2103b7d8dd2532b6af6c514e5d3b95f364db6503416633bba4b838612fde", "file_fingerprint": "sha256:0973eb2098961d7d60ac66c4217a6974abac61cd366b713ee9f4ac626fe6fb59", "path": ".claude/nlpm.local.md", "override_value": {"threshold": 900}, "reason_given": ""}
{"event": "downstream_suppression", "timestamp": "2026-08-09T00:08:14Z", "repo": "xiaolai/cc-suite", "commit_sha": "6d02d7540acba055eda79c8355e85275a0451a3d", "rule_id": "R51", "suppression_type": "rule_override", "fingerprint": "sha256:6eb255100e953a537daab93747608eb544524e9e41b5c095b0cafe48079486a2", "file_fingerprint": "sha256:0973eb2098961d7d60ac66c4217a6974abac61cd366b713ee9f4ac626fe6fb59", "path": ".claude/nlpm.local.md", "override_value": {"enabled": true, "vocabulary_skill": "skills/cc-suite/vocabulary/"}, "reason_given": ""}
{"event":"pr_comments_snapshot","timestamp":"2026-08-09T12:20:10Z","pr":"Vincentwei1021/video-shotcraft#30","pr_state":"closed_unmerged","comments_hash":"sha256:ec684af332a7e164a92c9152d3eae3cd9bb7e25b0bd4f6a3b9104ab458675d11","fingerprints":["sha256:fe9bcce17b04db042b1843e383c797e9f8c507d99e5377e649272db1bbf664c5","sha256:feb1039c429e3ace708ddb25e1cb7d9238d2c588b33843a9785be78a245d7a57"],"rule_ids":["SEC-unescaped-attribute-interpolation","SEC-unescaped-attribute-interpolation"],"comments":[{"id":"IC_kwDOTdLZdc8AAAABN8kmRA","author":{"login":"Vincentwei1021"},"authorAssociation":"OWNER","body":"Good catch, and thanks for the clean report — the reproduction made it easy to verify. This was a real injection surface in `mediaMarkup()`.\n\nClosing as already fixed rather than merging: this finding reached us during the review rounds of #27, and the identical fix (wrapping both `data-src` interpolations with `escapeHtml`, plus a CI gate that enforces a canonical `./media/<name>.mp4?v=N` shape for every media URL in `library.json`) landed on `main` with that PR. Your branch's `gallery/app.js` is now byte-identical to `main`, so there's nothing left for this PR to change.\n\nAppreciated nonetheless — the other two NLPM PRs (#28, #31) are merged.","createdAt":"2026-08-09T09:53:03Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/Vincentwei1021/video-shotcraft/pull/30#issuecomment-5230896708","viewerDidAuthor":false}]}
{"event":"pr_comments_snapshot","timestamp":"2026-08-12T04:39:45Z","pr":"arpitg1304/robotics-agent-skills#7","pr_state":"closed_unmerged","comments_hash":"sha256:b1651720b2cd332ad12cea643806228d280a8a16ac2ce509a98a58ecb588208e","fingerprints":[],"rule_ids":[],"comments":[{"id":"IC_kwDORZiS988AAAABOZO3ig","author":{"login":"arpitg1304"},"authorAssociation":"OWNER","body":"Superseded by #6, which made this exact change to `skills/ros1/SKILL.md` along with the matching `ros2` fix, and is now merged as 0d2a4da. `main` already carries `name: ros1`.\n\nThanks for catching this one — the mismatch meant the skill silently failed to load, and `ros1`/`ros2` are both in the default bundle in `install.sh`, so it was affecting the out-of-the-box install. Closing as redundant, not as rejected; the fix is in.\n\nSeparately, #9 is a genuinely destructive bug and is still open — I'll pick that up next.","createdAt":"2026-08-12T01:18:29Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/arpitg1304/robotics-agent-skills/pull/7#issuecomment-5260949386","viewerDidAuthor":false}]}
{"event":"pr_comments_snapshot","timestamp":"2026-08-12T04:39:46Z","pr":"arpitg1304/robotics-agent-skills#8","pr_state":"closed_unmerged","comments_hash":"sha256:4c48637ab974a68e318ea0f24c230769d9bbc02428279dd2132e06d1728c5a16","fingerprints":[],"rule_ids":[],"comments":[{"id":"IC_kwDORZiS988AAAABOZO7Sg","author":{"login":"arpitg1304"},"authorAssociation":"OWNER","body":"Superseded by #6, which made this exact change to `skills/ros2/SKILL.md` along with the matching `ros1` fix, and is now merged as 0d2a4da. `main` already carries `name: ros2`.\n\nThanks for catching this — same note as on #7: the mismatch stopped the skill loading entirely, and `ros2` ships in the default `install.sh` bundle. Closing as redundant, not as rejected.\n\nSeparately, #9 is a genuinely destructive bug and is still open — I'll pick that up next.","createdAt":"2026-08-12T01:18:39Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/arpitg1304/robotics-agent-skills/pull/8#issuecomment-5260950346","viewerDidAuthor":false}]}
{"event":"pr_comments_snapshot","timestamp":"2026-08-12T08:35:47Z","pr":"arpitg1304/robotics-agent-skills#7","pr_state":"closed_unmerged","comments_hash":"sha256:b1651720b2cd332ad12cea643806228d280a8a16ac2ce509a98a58ecb588208e","fingerprints":[],"rule_ids":[],"comments":[{"id":"IC_kwDORZiS988AAAABOZO3ig","author":{"login":"arpitg1304"},"authorAssociation":"OWNER","body":"Superseded by #6, which made this exact change to `skills/ros1/SKILL.md` along with the matching `ros2` fix, and is now merged as 0d2a4da. `main` already carries `name: ros1`.\n\nThanks for catching this one — the mismatch meant the skill silently failed to load, and `ros1`/`ros2` are both in the default bundle in `install.sh`, so it was affecting the out-of-the-box install. Closing as redundant, not as rejected; the fix is in.\n\nSeparately, #9 is a genuinely destructive bug and is still open — I'll pick that up next.","createdAt":"2026-08-12T01:18:29Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/arpitg1304/robotics-agent-skills/pull/7#issuecomment-5260949386","viewerDidAuthor":false}]}
{"event":"pr_comments_snapshot","timestamp":"2026-08-12T08:35:48Z","pr":"arpitg1304/robotics-agent-skills#8","pr_state":"closed_unmerged","comments_hash":"sha256:4c48637ab974a68e318ea0f24c230769d9bbc02428279dd2132e06d1728c5a16","fingerprints":[],"rule_ids":[],"comments":[{"id":"IC_kwDORZiS988AAAABOZO7Sg","author":{"login":"arpitg1304"},"authorAssociation":"OWNER","body":"Superseded by #6, which made this exact change to `skills/ros2/SKILL.md` along with the matching `ros1` fix, and is now merged as 0d2a4da. `main` already carries `name: ros2`.\n\nThanks for catching this — same note as on #7: the mismatch stopped the skill loading entirely, and `ros2` ships in the default `install.sh` bundle. Closing as redundant, not as rejected.\n\nSeparately, #9 is a genuinely destructive bug and is still open — I'll pick that up next.","createdAt":"2026-08-12T01:18:39Z","includesCreatedEdit":false,"isMinimized":false,"minimizedReason":"","reactionGroups":[],"url":"https://github.com/arpitg1304/robotics-agent-skills/pull/8#issuecomment-5260950346","viewerDidAuthor":false}]}
{"event":"maintainer_rejected","timestamp":"2026-04-23T13:04:09Z","pr":"avifenesh/agentsys#340","comments_hash":"sha256:08954b4dd671704e23bb7dfeeb01ef8fc70412dad5d099a65f6500fb398872d1","fingerprints":["sha256:02e39c3bc04e120047ae9fe96943c3f60b45a86e285f9ca3ba38b923abb0c108"],"rule_ids":["SEC-unknown"],"dissent_type":"intentional_pattern","quote":"the underlying proposal is also being declined - Avi commented on #335 that caret ranges are intentional here so runtime security patches flow in automatically","commenter_role":"maintainer","classifier_model":"manual-backfill","classifier_confidence":"high"}
Expand Down
4 changes: 4 additions & 0 deletions auditor/logs/events.jsonl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3846,6 +3846,10 @@
{"timestamp":"2026-08-11T22:44:30Z","workflow":"dashboard","event":"dashboard_rendered","run_id":"31543671315","run_number":86,"data":{"repos":288,"findings":5328,"advisories":22}}
{"timestamp":"2026-08-12T00:38:44Z","workflow":"track","event":"status_check","run_id":"31550270376","run_number":694,"data":{"contributed":57,"tracked":38,"case_study_ready":43,"rule_adopted":2}}
{"timestamp":"2026-08-12T04:15:47Z","workflow":"classify","event":"classifications_emitted","run_id":"31562642650","run_number":114,"data":{"classifications":0,"invalid":0,"no_dissent":true}}
{"timestamp":"2026-08-12T04:39:45Z","workflow":"track","event":"finding_outcome","run_id":"31563813640","run_number":695,"data":{"pr":"arpitg1304/robotics-agent-skills#7","pr_state":"closed_unmerged","fingerprints":[],"rule_ids":[]}}
{"timestamp":"2026-08-12T04:39:46Z","workflow":"track","event":"finding_outcome","run_id":"31563813640","run_number":695,"data":{"pr":"arpitg1304/robotics-agent-skills#8","pr_state":"closed_unmerged","fingerprints":[],"rule_ids":[]}}
{"timestamp":"2026-08-12T04:39:47Z","workflow":"track","event":"finding_outcome","run_id":"31563813640","run_number":695,"data":{"pr":"arpitg1304/robotics-agent-skills#9","pr_state":"merged","fingerprints":[],"rule_ids":[]}}
{"timestamp":"2026-08-12T04:46:22Z","workflow":"track","event":"status_check","run_id":"31563813640","run_number":695,"data":{"contributed":56,"tracked":39,"case_study_ready":44,"rule_adopted":2}}
{"timestamp":"2026-08-12T04:45:45Z","workflow":"case-study","event":"no_narrative","run_id":"31563980135","run_number":294,"data":{"repo":"arpitg1304/robotics-agent-skills","reason":"thin narrative: score=74, security=REVIEW, merged=0, applied_separately=0, rejected=0, rule_adopted=False"}}
{"timestamp":"2026-08-12T08:35:47Z","workflow":"track","event":"finding_outcome","run_id":"31578766853","run_number":696,"data":{"pr":"arpitg1304/robotics-agent-skills#7","pr_state":"closed_unmerged","fingerprints":[],"rule_ids":[]}}
{"timestamp":"2026-08-12T08:35:48Z","workflow":"track","event":"finding_outcome","run_id":"31578766853","run_number":696,"data":{"pr":"arpitg1304/robotics-agent-skills#8","pr_state":"closed_unmerged","fingerprints":[],"rule_ids":[]}}
Expand Down
Loading
Loading