fix(review): 특권 OpenCode PR 소스 격리 - #579

Closed

seonghobae wants to merge 32 commits into

mainfrom

agent/fix-opencode-untrusted-checkout

Commits on Jul 16, 2026

fix(review): isolate untrusted PR source blobs
seonghobae
committed
61f4389

Commits on Jul 17, 2026

fix(review): bind approvals and isolate Git metadata
seonghobae
committed
9548f66
fix(review): fail closed before Noema credentials
seonghobae
committed
469c9eb
fix(review): trust isolated coverage worktree
seonghobae
committed
9e3508f
feat(review): scope organization queue sweeps
seonghobae
committed
461ddf2
fix(review): close Strix trust-boundary findings
seonghobae
committed
171ba46
Merge remote-tracking branch 'origin/main' into agent/fix-opencode-untrusted-checkout
seonghobae
committed
8702d86
fix(security): fail closed on incomplete Strix scans
seonghobae
committed
448b42d
Merge remote-tracking branch 'origin/main' into agent/fix-opencode-untrusted-checkout
seonghobae
committed
0496b9c
Merge remote-tracking branch 'origin/main' into agent/fix-opencode-untrusted-checkout
seonghobae
committed
1cd2e86
test(review): prove offline coverage paths
seonghobae
committed
e7e4ffd
test(review): isolate scheduler actor lookup
seonghobae
committed
f538d6d

Commits on Jul 20, 2026

Commits on Jul 22, 2026

fix(review): close privileged execution boundaries
seonghobae
committed
ac73542
fix(ci): close review trust-boundary gaps
seonghobae
committed
ad0d616
fix(ci): harden trusted review execution
seonghobae
committed
099ce24
fix(review): preserve descriptor and SHA identity
seonghobae
committed
674f9ba
fix(review): harden identity and scope contracts
seonghobae
committed
7e3cbcf
fix(ci): harden trusted review tooling
seonghobae
committed
d153584
fix(ci): harden Strix source materialization
seonghobae
committed
746dcbc
fix(ci): anchor review identity evidence
seonghobae
committed
c7b33d2
fix(ci): diff Dependabot lock from merge base
seonghobae
committed
bb55850
test(review): isolate autofix actor lookup
seonghobae
committed
dcc56ac
fix(review): anchor OpenCode base identity
seonghobae
committed
0d66caa
test(ci): cover privileged fail-closed paths
seonghobae
committed
b3bb41b
fix(autofix): require trusted marker actor
seonghobae
committed
6a6e5d4
fix(ci): support coverage artifact reruns
seonghobae
committed
b7fe19c
fix(ci): ignore malformed autofix markers
seonghobae
committed
4d58323

Commits on Jul 26, 2026

merge: refresh OpenCode isolation against main
seonghobae
committed
c9d2871