tamperward 2.32.0 → 2.34.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -2
- package/dist/cli/index.js +1018 -273
- package/package.json +2 -2
- package/schemas/audit-v1.schema.json +14 -1
- package/schemas/check-v1.schema.json +14 -2
- package/schemas/doctor-v1.schema.json +15 -1
- package/schemas/research-stdio-v1.schema.json +67 -0
- package/schemas/research-v1.schema.json +92 -2
- package/schemas/run-v1.schema.json +35 -2
- package/schemas/stats-v1.schema.json +16 -2
- package/schemas/verify-v1.schema.json +19 -2
package/README.md
CHANGED
|
@@ -239,11 +239,13 @@ node harness/perf/bench.mjs # performance budgets (docs/PERF.md)
|
|
|
239
239
|
```
|
|
240
240
|
|
|
241
241
|
Tamperward's own CI runs the engine it ships over every pull request — `check --diff`
|
|
242
|
-
over the PR range, cleared only by an out-of-band label
|
|
242
|
+
over the PR range, cleared only by an out-of-band exact-head label (generate one with
|
|
243
|
+
`tamperward signoff-label`) — and has, on more than one
|
|
243
244
|
occasion, blocked its own author's commits. Branch, then open a PR; `main` is
|
|
244
245
|
protected and CI must be green. Changing a protected asset will block your own PR
|
|
245
246
|
(working as intended); a reviewed, legitimate change is cleared by a maintainer
|
|
246
|
-
applying a `
|
|
247
|
+
applying a compact `tw1:<digest>` label, never by weakening the policy. Legacy full-SHA
|
|
248
|
+
tokens remain accepted by the parser for CI systems whose label transport can hold them.
|
|
247
249
|
|
|
248
250
|
The public surface is the CLI and its exit codes, the hook wire format, the
|
|
249
251
|
`.tamperward.yml` schema, and the versioned machine-output schemas under `schemas/` —
|