Merge branch 'main' into security/remediate-critical-injection

Author: hyperpolymath

.dockerignore

@@ -43,5 +43,4 @@ Containerfile  text eol=lf
 *.gz    binary
 # Lock files
 Cargo.lock  text eol=lf -diff
-flake.lock  text eol=lf -diff
 shared-context/learning/*.jsonl filter=lfs diff=lfs merge=lfs -text

.gitattributes

@@ -10,7 +10,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Trigger BoJ Server (Casket/ssg-mcp)
         run: |
           # Send a secure trigger to boj-server to build this repository

.github/workflows/boj-build.yml

@@ -21,10 +21,10 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v4
 
       - name: Checkout casket-ssg
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v4
         with:
           repository: hyperpolymath/casket-ssg
           path: .casket-ssg

.github/workflows/casket-pages.yml

@@ -41,15 +41,15 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v3
+        uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v3
+        uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3
         with:
           category: "/language:${{ matrix.language }}"

.github/workflows/codeql.yml

@@ -26,12 +26,16 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Check for A2ML files
         id: detect
         run: |
-          COUNT=$(find . -name '*.a2ml' -not -path './.git/*' | wc -l)
+          # audits/assail-classifications.a2ml is panic-attack's user-classification
+          # registry — an S-expression dialect by that tool's spec (see panic-attack
+          # CLAUDE.md), not the TOML-like manifest A2ML this gate validates. Exclude
+          # it rather than feeding it to a validator for a different dialect.
+          COUNT=$(find . -name '*.a2ml' -not -path './.git/*' -not -name 'assail-classifications.a2ml' | wc -l)
           echo "count=$COUNT" >> "$GITHUB_OUTPUT"
           if [ "$COUNT" -eq 0 ]; then
             echo "::warning::No .a2ml manifest files found. Every RSR repo should have 0-AI-MANIFEST.a2ml"
@@ -43,6 +47,19 @@ jobs:
         with:
           path: '.'
           strict: 'false'
+          # Re-state the action's default carve-outs (a custom value REPLACES
+          # the default list), plus panic-attack's user-classification
+          # registry: that file is an S-expression dialect by panic-attack's
+          # spec, not the TOML-like manifest A2ML this action validates.
+          paths-ignore: |
+            vendor/
+            vendored/
+            verified-container-spec/
+            .audittraining/
+            integration/fixtures/
+            test/fixtures/
+            tests/fixtures/
+            assail-classifications.a2ml
 
       - name: Write summary
         run: |
@@ -71,7 +88,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Check for K9 files
         id: detect
@@ -121,7 +138,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Scan for invisible characters
         id: lint
@@ -186,7 +203,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Check for Groove manifest
         id: groove
@@ -247,7 +264,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Generate dogfooding scorecard
         run: |

.github/workflows/dogfood-gate.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       - name: Install PyYAML (for workflow YAML validation)
         run: pip install pyyaml --quiet
       - name: Run E2E tests

.github/workflows/e2e.yml

@@ -19,7 +19,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout gitbot-fleet
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v4
         with:
           fetch-depth: 0
 

.github/workflows/hypatia-dispatch-intake.yml

@@ -42,10 +42,10 @@ on:
         required: false
         default: 'false'
         type: boolean
-  # Scheduled sweep
-  schedule:
-    # Every 15 minutes
-    - cron: '*/15 * * * *'
+  # NEUTERED 2026-06-16 (owner directive: never auto-merge security/dep PRs).
+  # The */15 autonomous sweep cron was removed so this workflow no longer runs
+  # unattended. It still runs on PR/review/check events and workflow_dispatch for
+  # MONITORING; the auto-merge job itself is gated OFF by default (see below).
 
 permissions:
   contents: write
@@ -219,10 +219,13 @@ jobs:
               "repos/${{ github.repository }}/pulls/$PR_NUM/reviews" \
               --jq '[.[] | select(.state == "APPROVED")] | length')
             
-            # Check 6: Author is trusted or has approval
+            # Check 6: Approval is REQUIRED.
             AUTHOR=$(echo "$PR" | jq -r '.user.login')
-            TRUSTED_AUTHORS="hyperpolymath|dependabot|renovate"
-            IS_TRUSTED=$(echo "$AUTHOR" | grep -E "$TRUSTED_AUTHORS" && echo "true" || echo "false")
+            # NEUTERED 2026-06-16 (owner directive: never auto-merge without human
+            # review). The trusted-author approval-bypass (hyperpolymath|dependabot|
+            # renovate merging with ZERO approvals) is removed: no author bypasses
+            # the approval requirement.
+            IS_TRUSTED="false"
             
             # Validate
             ALL_CHECKS_PASSED="true"
@@ -280,11 +283,15 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     needs: validate-prs
-    if: needs.validate-prs.outputs.auto_merge_candidates != '[]' && inputs.dry_run != 'true'
+    # NEUTERED 2026-06-16 (owner directive: security/dep PRs are manual-review only).
+    # Auto-merge is gated behind an explicit, default-OFF opt-in. Until the repo
+    # variable INBOX_STEWARD_AUTOMERGE is set to 'true', this job NEVER runs and
+    # nothing is auto-merged. Re-enable deliberately, and only with human-gated review.
+    if: vars.INBOX_STEWARD_AUTOMERGE == 'true' && needs.validate-prs.outputs.auto_merge_candidates != '[]' && inputs.dry_run != 'true'
 
     steps:
       - name: Checkout gitbot-fleet
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -373,7 +380,7 @@ jobs:
 
     steps:
       - name: Checkout gitbot-fleet
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Send dispatch to Hypatia
         env:

.github/workflows/inbox-steward.yml

@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout gitbot-fleet
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v4
         with:
           lfs: true  # shared-context/learning/*.jsonl is LFS-tracked (Item 60)