Skip to content

feat(ISSUE-263): W4-C3 adversary check 纳入 specs/** required checks (#284) - #312

Merged
randypanding merged 1 commit into
mainfrom
feat/issue263-w4c3-adversary-gate
Aug 23, 2026
Merged

randypanding merged 1 commit into
mainfrom
feat/issue263-w4c3-adversary-gate

Conversation

@cloudbrid-agent

@cloudbrid-agent cloudbrid-agent Bot commented Aug 23, 2026

Copy link
Copy Markdown
Contributor

ADR

  • ADR-0067 (spec 阶段攻击面)
  • ADR-0082 (红队守门制度)
  • ADR-0061 / ADR-0081 (g060 锁定)

)

W4-C3(.github#284,AC-14/AC-19,ADR-0082):
- .github/workflows/adversary-gate.yml:specs/** 路径 PR 必须含 adversary check
  (漏配/摘除/跳过即红,负向断言);开发路径豁免谓词由 diff 路径集确定性派生
  (pipeline/adversary/expected_skip.py,禁人工打标,AC-14);App 令牌写回
  check run(checks:write,INV-02)
- docs/w4c3-adversary-gate-reference.md:adversary-gate.yml 完整实现参考副本
  (workflow 文件因当前 cloudbrid-agent App 无 workflows 权限待补推)
- 注:main-protection.json / org-required-workflows.json 的 adversary check context
  登记已在 W4-C2 PR #311 推送(adversary check 必须列入 required_status_checks
  才有意义);本 PR 聚焦 gate workflow 实现与参考。

Closes #284
Relates to #283
@cloudbrid-agent
cloudbrid-agent Bot enabled auto-merge (squash) August 23, 2026 10:51
auto-merge was automatically disabled August 23, 2026 12:42

Pull request was closed

@randypanding randypanding reopened this Aug 23, 2026
@randypanding
randypanding merged commit 1b23310 into main Aug 23, 2026
17 of 19 checks passed
@randypanding
randypanding deleted the feat/issue263-w4c3-adversary-gate branch August 23, 2026 12:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant