3 Commits

Include renames

Author	SHA1	Message	Date
araharah-executor	b959e23eda	feat(07-03): bundle-gates + cloudflare-probes — the shipped-bundle scan and the live probes (T-07-04, T-07-16) ... - runBundleTelemetryGate: PRODUCTION web/dist ONLY (dist-harness forbidden, BA5); analytics/beacon token set (sendBeacon explicit form); positive host allowlist with the host inventory printed, never assumed (A4); deep-link crypto (D-11) and storage tokens JS-assets-only; a missing build is notRun, never a silent pass - runKvExpiryProbe: npx wrangler kv key list (current syntax, deprecated colon form forbidden), namespace id read from bot/wrangler.jsonc at runtime; parses name/expiration/metadata + list_complete/cursor and follows the cursor; unexpected families REPORTED (A5); oldest/newest expiry reported; raw key names never printed (category-only evidence) - runAssetHeaderProbe: curl -sSI cache-control/cf-cache-status reported VERBATIM (probabilistic — printed, never interpreted) - documented adjudications: MapLibre static-text hosts, W3C namespace identifiers, bare-array = CLI's internally-paginated complete set	2026-10-25 04:36:59 +08:00
araharah-executor	430993b881	feat(07-03): source-gates library — storage/TTL/log-vocab/runtime-host gates over ALL five src trees (D-01, T-07-01..03) ... - runStorageGate: the canonical comment-stripped BANNED-persistence + service-worker scan, extended repo-wide (web/bot/routing/search/theme src) - runKvTtlGate: PG1's same-line expirationTtl law with the named-constant ^[A-Z_]{2,}$ requirement, repo-wide (T-07-01) - runLogVocabularyGate: the D-14 category-only law machine-verified — bracketed surface tokens, carrier ban (chat_id/user_id whole-word), web state-token vocabulary, JSON.stringify-in-log forbidden (T-07-03) - runRuntimeHostGate: POSITIVE host allowlist; inventory printed, never assumed (A4); cwd-independent root + documented SVG-namespace adjudication	2026-10-25 04:34:32 +08:00
araharah-executor	87fcb2833e	test(07-03): privacy-audit gate suite — SA/BG/CP/AU vectors, RED before the gates exist ... - SA1-5: each source gate returns {id, pass, evidence}, passes the current tree, and FAILS a synthetic violation via injected fixture roots - BG1-2: production web/dist only; missing build is notRun (never a pass) - CP1-2: probeUnavailable exact shape + credentials-absent degradation - AU1-3: CLI exit 0/1/2 — CLEAN on this tree, FAILED on a fixture root (PRIVACY_AUDIT_ROOT), NOT RUN for --live without credentials	2026-10-25 04:33:12 +08:00