c-fu/arah2
1
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
18 Commits 2 Branches 0 Tags
0b3eebf7d031fae4204b1eff06b27d6743b01260
Commit Graph
4 Commits
Author SHA1 Message Date
araharah-executor 0b3eebf7d0 feat(01-04): audit inline style attributes — close D-13 evasion path (GREEN) 
- implementation pages' style="…" attributes are rendered CSS: every
  declaration checked like <style>-block CSS, violations reported as
  file:line: style attribute { prop: value }
- token-var references pass by construction; only off-token literals flag
- 16/16 audit tests green; real build still AUDIT CLEAN
 2026-10-22 08:28:43 +08:00
araharah-executor 9ba73f207d test(01-04): add failing inline-style-attribute audit test (RED) 
- T8: style="color: #00ff00" on an implementation page currently passes
  silently — an evasion path around the <style>-block scan (Rule 2 hole
  in the D-13 evidence: the gallery itself will use style attributes)
 2026-10-22 08:28:30 +08:00
araharah-executor b39317de64 feat(01-04): automated off-token audit (GREEN) — D-13 
- audit.mjs: zero-dep rendered-CSS scanner — flags off-token hex/rgb()/hsl()
  literals, non-sanctioned font families, non-zero border-radius, box-shadow,
  backdrop-filter, blur/drop-shadow; violations printed as file:line: declaration
- drift guards (exit 2): <40 color tokens, any non-zero --radius-* token,
  missing token sheet / registered page / CSS input — no silent passes (T-1-07)
- scope adjudication: framework layers + @property --tw-* skipped; @layer
  utilities audited only for classes used by implementation pages (mockup
  vocabulary is reference material, D-06; sheet/basemap pages are the registry)
- token-hue+alpha 8-digit forms sanctioned; rounded-full sanctioned as circle
  primitive (spec geometry — puck/medallion signets); 50% radius stays flagged
- wired: theme npm audit + test scripts (root audit delegate resolves)
 2026-10-22 08:26:57 +08:00
araharah-executor 6a7c256c62 test(01-04): add failing off-token audit tests (RED) 
- TDD harness for the D-13 audit: 13 checks across 7 test groups
- clean/dirty/drift/components-layer/used-utilities fixtures under /tmp/opencode
- real-build integration test (npm run build + default dist audit → exit 0)
- contract: exit 0 clean, 1 violations (file:line: declaration), 2 token drift
 2026-10-22 08:23:40 +08:00