@zhivex-ai/harness 1.0.0 → 1.1.0-rc.2

package/docs/reports/evidence/security-current-2026-09-19.json

@@ -1,91 +0,0 @@
-{
-  "kind": "automated-security-revalidation",
-  "commit": "c2b2bb917d0471e61afc5f731a61c00b44fa3731",
-  "reviewer": "Codex (automated; delegated by operator)",
-  "command": "bun run scripts/validate-security-review.ts",
-  "exitCode": 0,
-  "results": [
-    {
-      "id": "SEC-01",
-      "passed": true,
-      "acceptedConflictingWrites": 1,
-      "finalContent": "first"
-    },
-    {
-      "id": "CONTROL-sequential-stale-digest",
-      "passed": true,
-      "rejectedStale": true
-    },
-    {
-      "id": "SEC-02",
-      "passed": true,
-      "replacementVisibleByDefault": true,
-      "omissionNoticeVisible": false,
-      "fullViewAvailable": true
-    },
-    {
-      "id": "SEC-03",
-      "passed": true,
-      "missingTools": []
-    },
-    {
-      "id": "SEC-04",
-      "passed": true,
-      "throughPublicRunHarness": true,
-      "status": "completed",
-      "differentTenantUserNamespace": true,
-      "otherTenantCandidateInToolOutput": false
-    }
-  ],
-  "scope": "Regression acceptance of four previously confirmed findings; not human attestation or GA certification",
-  "sourceHashes": {
-    "src/bounded-reads.ts": "9807bb460894be3279c5425af19863d1c6e419a1582ba6910ec7e7fc35703ed6",
-    "src/capabilities.ts": "56fdb60a2f6e1d33b2dc26d38b6d2709807e491ba1268d47b97876c2c0591d65",
-    "src/change-envelope.ts": "9047ec978c9e5117965b8093ec961d855f97bbc2c3accdc79b74cfe6a0e4f01e",
-    "src/cli-options.ts": "f48d9be132fed38f2ddbcfecbd8222c664a0df2f20edc28ce8d1b9b1a1900863",
-    "src/cli-profiles.ts": "4fe451f1645e95f4957597a8724fa989b3c661ae1693252bfd6e74a51d20fc74",
-    "src/cli-stream.ts": "5ab8a4b1b8cf0a3dfa7b5b1f9e4e0facf8f6e7f6c341bdf700a41dc8927c825e",
-    "src/cli.ts": "5a4acb4695a968a58fbeac05c4bb89848a9653d6189590f0ff90e430ffa98d14",
-    "src/compaction.ts": "9e06a0abeeef155377f40c160b21c56256bca95ec18c5ee897681a5fc73db169",
-    "src/config.ts": "b1d3991e84add58603fb85b2a604b9b3eb56ae879d0fa30b0cb40545fa44edc1",
-    "src/console-context.ts": "0ad7e4559504b9ed09ab500d615dea09af1075d357f02ec3b77f003d55d951db",
-    "src/console-input.ts": "dc8ea0cdbba1364db288d5156c5ff9819362c46b37ef35a98b0475b6c445b1f8",
-    "src/context-engineering.ts": "1995e564f6b91974e75bf66dd421ddcbea29b1f8eee59b76eb4e34c9d6d8f47e",
-    "src/context-metrics.ts": "3eb30f9db808f918ed8d73d4f8ac19a13acb09ed5c1ee70fdae05201714b9198",
-    "src/edit-contracts.ts": "47cc3132e27f8749d54a32bbcc33bb174cf4448f0d0171b2578cdb559cf2176b",
-    "src/errors.ts": "e02f4eb80562a83762f908bda56c950ec6a2b78725c0c8a49f41fee0057ab903",
-    "src/execution-environment.ts": "9ce6c49afab26527d5296f0c11f106063590f7333300d58dd49d5a1ec1b4b6e9",
-    "src/file-security.ts": "b8c9f4988c4339c73a60ab4fa8d394b3eecc19117a0c61a8d19ab6483ca253df",
-    "src/harness.ts": "195983cfbacb6097a5c8c2a106e59c3fae2437f053299da1c0170dd914879c8d",
-    "src/index.ts": "4bbfcd11376d48c4f1c1ec17d6b5c9f51baa9331fa999432be178bae94530a5e",
-    "src/json-contracts.ts": "0780145636b47829a1aa6087c574d5654eb31b7534ea7d9c38c188d648c90272",
-    "src/mcp.ts": "7722de031921c620ec03b9e42a6596ef8415aa8e4bb5f93ea84d2427c466e554",
-    "src/model-budget.ts": "97c00019d7e737fc7acdd04cdac0811dca8d85c3e858de519ebba91888cf1ee7",
-    "src/operations.ts": "bcccaf4d1d0ec117c2ed35df92185564d33399e5fdc5c12225ac61f14fd0b4b1",
-    "src/orchestration.ts": "b56c8c7d526a99b745cc17769e0a1b7b500b25920e77f34aa0dd01c9758de319",
-    "src/package-manager.ts": "cec4666bbab2f42e0a269709631f79f9f87c2c4dbb3cafeffacfaff761069e2c",
-    "src/process-runtime.ts": "b7286731a0b5c96dcad0b8e3a4bf1155d0539d73303cd7ebe77ffabf858f1729",
-    "src/providers.ts": "70ccfc7f315cd7238e83d69b719ce4908f3b620c564cbb4f00f93e102e025602",
-    "src/repair-controller.ts": "2c05370e93978a5bf106b2cee293478a77b47920cec7470f536b31757198f41c",
-    "src/repair-progress.ts": "cf30117ab69564f2b36ff8f0e86dcb876e6c031647340a7b1bef648d1e0366b9",
-    "src/repair-verifier.ts": "b70fb11feee8cdc7933947ccac0b78f8bb5c0eaccc3b29ad527197d77f40ffc9",
-    "src/replacement-edits.ts": "8a0efdd3a7a9fc3e5a5475916cbd17ef882265881bb61076db58673e80b72957",
-    "src/routing.ts": "8e7c9f5968b4bd638cbbc86b19847ca183f3418b9a298783b96a88cffa568e22",
-    "src/run-interruption.ts": "df99129cf2dd6b938eca629cb897c4350a7d57fe6bf0ce437f5f3f30271617df",
-    "src/runtime-checkpoints.ts": "e3b75a0b86fb5d21992b1a126b35446110ba5fcaf4317ed5005b1a44555118dc",
-    "src/runtime-diagnostics.ts": "e1e5a3a558fa2aaeb477335dc336551f022c1234fe5e742eefc6599c8803e364",
-    "src/runtime-policy.ts": "8356acf0102f0e73839b81ed628a5c0d9a89d9c21b0ca416efedde8f1b3414e2",
-    "src/sessions.ts": "5167c8cf36bd4b8845ee278883394700321b65397f49c1dda0cf0d0de09dd06e",
-    "src/sqlite-database.ts": "18765d1ca0c2f2ad87bfd82d311312dfe8a42006556f27bc21da5892ed3b044e",
-    "src/state-backup.ts": "b6f8f1aedeb5dce31b65c23c7ffc50030870655b58a5aaaef9989bafb9da5c68",
-    "src/state-directory.ts": "3711550991951e6b738a08deaa0e06da84d01864c03a9602600f592963fa3211",
-    "src/task-memory.ts": "5b62c863be5a23c33608633cd7aac0464f5536d01cba930aca58b11870170731",
-    "src/terminal-markdown.ts": "8cffb6ebaf25108cb2bee04956d9b2973635b010f5d7ce6be21b3ceffe3e8bfd",
-    "src/terminal-ui.ts": "4da1878a76ba608a2517bf5d5c992a9a88702aba3fd800a9980129ba93e157bc",
-    "src/time-to-safe-fix.ts": "4add1d49c0ea209cc496c66fa2b2012dc7bcab87e678a58c8591b3c2cdc8df8a",
-    "src/tool-registry.ts": "7e90fff11940e525883c9ec0d2adbea2e6616f8bd9bc4ec77e1b7277e4217f2c",
-    "src/version.ts": "b2c2f80a40adc08e8258b81e82434273f0bdfa787528b2221f14efe7f06aa747",
-    "src/workspace-mutation-lock.ts": "ca201242db16173bd3a4d86c5d8bb0c2b6f3c43bfed3e4fa4ff5f06a75b19e80",
-    "src/workspace.ts": "809f8bbfcf72fed10d860c48585089ca65bb3ef7c672ee6df3c918907a968302"
-  }
-}

package/docs/reports/evidence/security-remediation-2026-09-19.json

@@ -1,97 +0,0 @@
-{
-  "schemaVersion": 1,
-  "kind": "local-security-remediation-validation",
-  "date": "2026-09-19",
-  "reviewer": "Codex automated technical reviewer",
-  "baseCommit": "28723ff3350b7572d5bd68f2d40b6feef1e0e6b4",
-  "candidate": "uncommitted working tree; not a release attestation",
-  "fileSha256": {
-    "bun.lock": "e370459197ce52c3961770f3c5ccaab7ff35ddbe641ef72e8bd61f87a8b8e3fe",
-    "contracts/stable-api-signatures.json": "d863eda985db5779b8477593b3bc0771915d2f4b92c0ac83ab54efd7593bc13b",
-    "package.json": "a4a2507e3ad876d72cad49a16e149192d33521fb4175bb40a3eb077ccfdf43a1",
-    "scripts/check-docs.ts": "57ee9878b72961a53a7e4baaf9790dba230edef172df641030b04dfff0fbc5ee",
-    "scripts/security-review-evidence.ts": "8ed57fda8704c9162f7a3f74d1a71b362b2581247e84fb24844f11778e835dde",
-    "scripts/stable-api-signatures.ts": "8c6d12b27ed75fa327614fe6f7a6d12cd1104ae7c254ce284cad30a9b687d5e5",
-    "scripts/validate-ga-budget.ts": "5a4125a8e6d0ac4f8d9063091dca7546cca3d8963a2f248f029fe9ee6ec3bbc6",
-    "scripts/validate-security-review.ts": "956d8d332ce59c39d6b2fd763be2a0f162e51760f4d63cd1e5c9bdbe48b778f3",
-    "src/cli.ts": "5a4acb4695a968a58fbeac05c4bb89848a9653d6189590f0ff90e430ffa98d14",
-    "src/config.ts": "b1d3991e84add58603fb85b2a604b9b3eb56ae879d0fa30b0cb40545fa44edc1",
-    "src/execution-environment.ts": "9ce6c49afab26527d5296f0c11f106063590f7333300d58dd49d5a1ec1b4b6e9",
-    "src/harness.ts": "6562180a95f2bbd8c387bd8925cf511a22f155de9a67d384cb6d933f436c2c46",
-    "src/orchestration.ts": "b56c8c7d526a99b745cc17769e0a1b7b500b25920e77f34aa0dd01c9758de319",
-    "src/terminal-ui.ts": "4da1878a76ba608a2517bf5d5c992a9a88702aba3fd800a9980129ba93e157bc",
-    "src/workspace-mutation-lock.ts": "ca201242db16173bd3a4d86c5d8bb0c2b6f3c43bfed3e4fa4ff5f06a75b19e80",
-    "src/workspace.ts": "809f8bbfcf72fed10d860c48585089ca65bb3ef7c672ee6df3c918907a968302",
-    "tests/execution-environment.test.ts": "4f9a96170662b9bba07754f09df6183fd18dead5ad0cb7c395f4f34c9f65af03",
-    "tests/security-review-evidence.test.ts": "2fd505004d8cf9f8e94c54c5e72eb6b2e6053ae03fe936ff7f3bd2c6886e7b9d",
-    "tests/terminal-ui.test.ts": "2275e91dd0a265d6f249bf1ef33ef2b4aba0f64ceec891c8fb216dbd9d53bc76",
-    "tests/time-to-safe-fix-zhivex-driver.test.ts": "3cc07cabe41114f693b8557b7c26b0242f61c3f659454e68ce27ac575f960501",
-    "tests/workspace-concurrency.test.ts": "6f616fa87c4a190a40dee32dcfe19e86b22f582d6aa80b323aee114db8dc8a0e"
-  },
-  "securityProbes": [
-    {
-      "id": "SEC-01",
-      "passed": true,
-      "acceptedConflictingWrites": 1,
-      "finalContent": "first"
-    },
-    {
-      "id": "CONTROL-sequential-stale-digest",
-      "passed": true,
-      "rejectedStale": true
-    },
-    {
-      "id": "SEC-02",
-      "passed": true,
-      "replacementVisibleByDefault": true,
-      "omissionNoticeVisible": false,
-      "fullViewAvailable": true
-    },
-    {
-      "id": "SEC-03",
-      "passed": true,
-      "missingTools": []
-    },
-    {
-      "id": "SEC-04",
-      "passed": true,
-      "throughPublicRunHarness": true,
-      "status": "completed",
-      "differentTenantUserNamespace": true,
-      "otherTenantCandidateInToolOutput": false
-    }
-  ],
-  "checks": {
-    "suite": {
-      "passed": 519,
-      "failed": 0,
-      "files": 60
-    },
-    "additionalOciConcurrencyAndWorkspaceTests": {
-      "passed": 30,
-      "failed": 0
-    },
-    "signatureTests": {
-      "passed": 3,
-      "failed": 0
-    },
-    "docs": "pass",
-    "types": "pass",
-    "toolingTypes": "pass",
-    "preparationContract": "pass; GA blockers remain",
-    "migrations": "pass",
-    "evaluations": "pass",
-    "benchmarks": "pass",
-    "mcp": "pass",
-    "officialMcp": "pass",
-    "realDocker": "pass",
-    "installedPackage": "pass after compiler emission correction",
-    "dependencyAudit": "pass; 35 packages, no vulnerabilities reported"
-  },
-  "openGaBlockers": [
-    "GA-01: Meta/OpenAI default token preflight rejects second turn",
-    "Fresh live certification and representative holdout required",
-    "Protected release, immutable published artifact and provenance evidence required",
-    "Review final candidate and resolve formal GA readiness requirements"
-  ]
-}