Repository navigation

feat(deps): cargo-deny gate, unsafe guard, command.run env fix, edition 2024 - #159

Merged

github-actions[bot] merged 29 commits into

mainfrom

feat/rust-standards-edition-2024

Oct 31, 2026

Merged

feat(deps): cargo-deny gate, unsafe guard, command.run env fix, edition 2024#159
github-actions[bot] merged 29 commits into
mainfrom
feat/rust-standards-edition-2024

Commits on Oct 31, 2026
- docs(plan): move one-list deny test to Task 4
  
  brujack
  and
  claude
  committed
  ba725d0
- ci: run full cargo-deny policy in cargo-audit job
  
  brujack
  and
  claude
  committed
  ba3c1b5
- build(deny): cover transitive unsound advisories
  
  brujack
  and
  claude
  committed
  3848669
- test(deny): bound cargo-deny calls, explain keys
  
  brujack
  and
  claude
  committed
  b231a02
- build(lints): deny unsafe_code, tag FFI sites
  
  brujack
  and
  claude
  committed
  6c9d462
- fix(lints): state real unsafe invariants
  
  brujack
  and
  claude
  committed
  4f08187
- ci: replace scheduled cargo-audit with cargo-deny
  
  brujack
  and
  claude
  committed
  63f479d
- fix(exec): resolve program on the step's env PATH
  
  brujack
  and
  claude
  committed
  1dfb463
- test(exec): cover elevated resolution, last PATH wins
  
  brujack
  and
  claude
  committed
  e8ce9f7
- fix(command): pass env to the child, not the etch process
  
  brujack
  and
  claude
  committed
  99ed8d2
- test(command): prove env values reach the child
  
  brujack
  and
  claude
  committed
  a6af762
- test: add EnvGuard and its serial source check
  
  brujack
  and
  claude
  committed
  8fe3d45
- test: close EnvGuard check signature and alias gaps
  
  brujack
  and
  claude
  committed
  2fc1319
- test(atoms): mutate env only through EnvGuard
  
  brujack
  and
  claude
  committed
  bdc5a07
- test(actions): mutate env only through EnvGuard
  
  brujack
  and
  claude
  committed
  cae589f
- test: finish EnvGuard migration, inline env helpers
  
  brujack
  and
  claude
  committed
  51d5fab
- build: move workspace to edition 2024
  
  brujack
  and
  claude
  committed
  4bccc5a
- docs(claude): cargo-deny-only triage, EnvGuard, edition 2024
  
  brujack
  and
  claude
  committed
  dd5fc6a
- fix(review): refuse env with privileged command.run
  
  brujack
  and
  claude
  committed
  f3296b9
- docs(backlog): drop the done edition-2024 row
  
  brujack
  and
  claude
  committed
  a288726
- fix(test-quality): pin env sort, step-PATH miss, refusal text
  
  brujack
  and
  claude
  committed
  c5b52c2
- docs(adr): record cargo-deny, unsafe guard, edition 2024
  
  brujack
  and
  claude
  committed
  2109d49
- fix(maintainability): move state write out of Apply::execute
  
  brujack
  and
  claude
  committed
  e9f9e59
- docs(spec): spec alignment verdict 2026-10-31
  
  brujack
  and
  claude
  committed
  8f905e9
- fix(review): say where the too_many_lines ratchet lives
  
  brujack
  and
  claude
  committed
  a849809
- chore: ignore lockfiles beside the deny fixture crates
  
  brujack
  and
  claude
  committed
  1589263
- ci(mutation-pr): fit large diffs, skip macOS-only files
  
  brujack
  and
  claude
  committed
  ae8f09b
- docs(backlog): cargo-deny should run --locked
  
  brujack
  and
  claude
  committed
  3c060a9
- test(review): pin CustomPathBuf schema to a literal
  
  brujack
  and
  claude
  committed
  1b5db1f

Commits

Commits on Oct 31, 2026