Every change, in the order it merged

Merge pull request #6878: fix(security): close the 15 vulnerabilities #6803 let through — every match judged, proofs anchored

direct to main51a4bf025 filesalso engine

authBypassnPlusOnesecretssecurity

Merge main into fix/fp-language-rules (resolve universal-checker.js with #6803)

direct to main1539a2435 filesalso engine, repo

accessibilityasyncIterationcodeQualitycrossFileTaintnPlusOnesecretssecurity

Merge branch 'main' into fix/fp-language-rules

direct to maind07a276143 filesalso tests, website, repo, docs, tooling

crossFileTainte2efakeFixDetectorlintsyntaxundefinedRef

Merge remote-tracking branch 'gluecron/fp-language-rules' into fix/fp-language-rules

direct to mainc8d1a5116 filesalso tests

bashSafetyerrorSwallowshell

fix(rust): the quote! walk skips comments and literals through the one source-strip definition

direct to main64bcbb62 filesalso tests

fix(ruby): helper visibility is read from the helper's own class body, not the whole file

direct to main1f495de2 filesalso tests

fix(python): the startup-file and prompt proofs are per call, per binding, and prove compile()'s source

direct to main33c33392 filesalso tests

fix(checker): an exempt proof must cover EVERY match on the line, and a throwing proof keeps the finding

direct to main57615303 filesalso tests

fix(php): string-literal test uses source-strip, the one definition (string-guard-canonical)

direct to main7dbe8811 file

fix(kotlin): TODO("... is not supported ...") is a stated limitation, not a placeholder

direct to main4b8204e3 filesalso tests

fix(rust): unimplemented!() / todo!() inside a quote!{} body is generated code, not a panic

direct to main2b0a3f13 filesalso tests

fix(ruby): a private backtick wrapper that only ever receives literals is not command injection

direct to maincae5bb13 filesalso tests

fix(php): eval( inside a string literal is text, not a call

direct to maina8ca6e73 filesalso tests

fix(python): eval/exec of the operator's own startup file or typed prompt line is not a finding

direct to main62f683c3 filesalso tests

fix(sweep): the clean-tree skip accepts any remote's main, not only origin

direct to mainb10bfd71 file

ops: owner docs are re-checked every session; Stop hook enforces it

direct to main5d0a8727 filesalso tests, tooling, repo

Merge remote-tracking branch 'gluecron/main' into HEAD

direct to main0bb401a71 filesalso tests, engine, docs, repo, tooling

Merge remote-tracking branch 'gluecron/main' into pr-6523

direct to main72269c057 filesalso engine, website, tooling, docs, repo

prSize

fix(move 7): a GitHub PAT recognises its own PR comment again

direct to mainfefb66b3 filesalso tests

fix(move 7): headline from the gate; write only GateTest's own, this gate's comment

direct to main4caf19f11 filesalso engine, website, tooling, docs, repo

test(reporters): pin GITHUB_SERVER_URL in the replay-notice test

direct to mainf71a6321 file

fix(move 7): no silent .catch on the GitHub comment transport

direct to main76a3f781 file

fix(move 7): one GateTest PR comment, blocking first, on every host

direct to main82f078919 filesalso engine, tests, tooling, docs, repo

feat(onboarding): #6 sign-in that keeps the scan you just ran

#999df6503b43 filesalso tests, docs, engine, repo

chore(handoff): accounts are interchangeable — state lives in the repo (ES §8)

#10145aa24d67 filesalso tests, engine

fix(tests): pin slowest-modules ordering on stamped durations, not sleeps

#101391efbe86 filesalso tests, engine

chore(copy): the website sells capability, not the browser library

#1012110039127 filesalso tests, engine

feat(onboarding): #8 quickstart, CLI and wizard tell one baseline story

#99759a8a4267 filesalso tests, engine

feat(admin): #2 primitives — adminFetch, Panel, Mark, RelativeTime, CopyId, Stat

#100157f476a76 filesalso tests, engine, repo

feat(onboarding): #5 one sales-pause check for every paid prompt

#998397989b30 filesalso tests, engine

feat(onboarding): #1 Playwright matrix in white and black at 1440 and 390, plus copy guard

#9922186e4445 filesalso tests, docs, engine, CI integration, repo, our CI, tooling

ciSecuritysyntaxundefinedRef

chore(tallrig): sibling check uses /api/platform-status; retired names from Tallrig CURRENT.md

#99386b4c1631 filesalso docs, tests, engine, CI integration, repo, our CI, tooling

ciSecuritysyntaxundefinedRef

Flywheel trainer report — 2026-10-07

#988b84d9c118 filesalso tests

test(build): route modules export route fields only

#996bc9e5c31 file

fix(bots): empire-smoke on Gluecron drops to 30-min cadence while the cross-host block is Craig's call

#1008f4382ed1 file

chore: move GateTest's deploy source and scheduled bots to Gluecron

#10000398b3215 filesalso tooling, tests, docs

docs: fix the #1004 truth defects found by retroactive review

#1006db877227 filesalso website, tests

feat(metrics): rolling per-repo false-positive rate (mandate priority 2)

#1005ac56c2a3 filesalso tests

ci: run the merge gate on Gluecron

#994ac11bb753 filesalso tests, docs, repo

feat(medic): secrets:apply-chain board case — a half-wired secrets panel pages instead of lurking

#100398b52013 filesalso tests, docs

feat(medic): GateTest's own medic, phase 1 — board, allowlisted repairs, receipted escalation

#1002cd86e4910 filesalso tests, docs

feat(onboarding): #1 hero scan box, one primary action, no dead links on /

#995fad388f37 filesalso tests

feat(admin): #1 tokens, Geist, hue ratchet

#991c0bd34e33 filesalso tests, repo

chore: retire crontech.ai references; prefer tallrig.com over the vapron.ai legacy alias (Craig 2026-10-07)

#9864907a8842 filesalso CI integration, website, tests, engine, our CI

crossBrowserinteractiveElements

fix(health): /api/health/deep ok is true only when every check is ok

#9843d6650a5 filesalso tests, docs

fix(deps): @modelcontextprotocol/sdk 1.32.1 — clears GHSA-6qxp blocking every Full Scan

#990cd9b2b93 files

fix(ops): readiness canary scans a public repo, not the private source repo

#98210bdbc52 filesalso tests

Refresh the head-to-head table — 2026-10-05

#980725cc1f1 file

Refresh website testing statistics — 2026-10-05

#979be2ea713 files

Flywheel trainer report — 2026-10-06

#978304327033 filesalso tests

fix(rules): four dogfood false positives from this week's PRs (KI #114/#115/#117/#118)

#9769061d299 filesalso engine, docs

fakeFixDetectorraceCondition

feat(ops): fleet-crawl workflow, daily peer-platform probe and crawl with two-miss escalation

#970cbf364028 filesalso website, tooling, docs, repo, engine, our CI

fix(usage): close KI #116 - editor call site, gtmcp_ keys, disclosure, idempotent rows

#971ea49be019 filesalso website, repo, engine, docs

feat(usage): local-surface usage writers through the telemetry upload (Move 51 WP5)

#969788f0f913 filesalso engine, docs, repo, CI integration, tests

feat(usage): ceiling alerts at 50/80/100% (Move 51)

#96584f155913 filesalso repo, website, docs, engine

feat(vscode): show 30-day usage in the status bar (Move 51 WP3)

#9667c898ba6 filesalso tests, docs

fix(health): a sending-only Resend key reads as ok, not down (KI #113)

#9614ef110f3 filesalso tests, docs

fix(tests): KI #114 — security-inert-patterns under 1s (was ~36s)

#9602931f851 file

Flywheel trainer report — 2026-10-04

#9530228d8c17 filesalso tests

Refresh website testing statistics — 2026-10-04

#9547430b854 filesalso precision corpus

fix: /api/badge?status= can no longer forge a GateTest verdict

#95692c6b073 filesalso website

test: exempt the prompt-safety data fixture from the legacy-model sweep

#9575de8b111 file

fix(health): an invalid Resend key reads as down "rejected the key"

#9557b4812c2 filesalso tests

fix(playground): share links carry a server-signed result; a forged grade no longer renders

#952d243f2310 filesalso tests

fix(web): /scan/status asks "signed in?" without a 401 for every anonymous visitor

#9501fbaccc3 filesalso tests

fix(main-red): regenerate changelog.json at 1.62.0

#9519228d081 file

Flywheel trainer report — 2026-10-03

#90913ef08117 filesalso tests

Refresh website testing statistics — 2026-10-03

#9102bd04be4 filesalso precision corpus

release: v1.62.0 notes in the repo, published by the workflow under their own title

#94704326e22 filesalso docs

fix(crawl): API endpoints owe no SEO tags, and head tags are read in any attribute order

#946dc61e252 filesalso tests

fix(sync): every shipped surface says 122 modules, and the guard now reads them all

#94572dd3f18 filesalso repo, engine, CI integration, tests, docs

fix(deploy): build into .next-staging and swap, so a deploy no longer 500s every chunk

#942d7f21aa7 filesalso tests, tooling, docs

fix(security): internal-pricing-exposure reads shorthand keys and customer-facing view helpers

#9445cfb28a2 filesalso tests

fix(crawl): a HEAD 404 is retried as GET, and a bot challenge is "not checked"

#94353919376 filesalso tests

liveCrawler

fix(a11y): an id labels an input only when something names it; bound the JSX comment strip

#941b5f22772 filesalso tests

accessibility

feat(security): retention-never-scheduled and internal-pricing-exposure

#940e4eb7444 filesalso tests, tooling

security

fix(a11y): input-label reads <select>/<textarea>, trusts <Field label>, reads type from the element

#93929890832 filesalso tests

accessibility

fix(security): error-detail-leak sees casts, String(err), redirects, streams and HTML pages

#938cd993cf2 filesalso tests

fix(security): error-detail-leak catches a raw caught message in any response body

#9370aceb6d2 filesalso tests

fix(engine): six Gluecron false-positive shapes, each with its control pair

#9358ebf0c67 filesalso tests

cookieSecuritydataIntegrityerrorSwallowmoneyFloatretryHygieneshell

fix(engine): "not checked" for broken test environments; five Gluecron FP shapes

#9366f2017314 filesalso tests

deployContractdeployScriptValidatore2ehardcodedUrllinkspromptSafetyrollbackHonestyunitTests

fix(security): error-leak rules tell operator and internal surfaces apart

#934264b45f3 filesalso tests

security

feat(mobileRendering): catch text cut off at the edge when nothing scrolls

#9321da3a393 filesalso tests

mobileRendering

fix(website): the defects an end-to-end walk of gatetest.io found

#930fede75a36 filesalso tests

fix(web): four live-scan false positives from scanning gluecron.com and gatetest.io

#93149a8ab09 filesalso website, tests

accessibilityapiHealthcookieSecurityseo

fix(liveCrawler): judge error pages where a visitor sees them; one finding per broken URL

#929b2c07255 filesalso tests

fix(liveCrawler): HTTP 429 is the site rate-limiting the crawl, not a broken page

#928d66a67b6 filesalso tests

liveCrawler

release: 1.62.0 — precision batch from the Gluecron/Tallrig triage

#92792b913a5 filesalso website, tooling, docsv1.62.0

fix(deploy): recover the production box through a request committed to main

#92697616f64 filesalso tests, docs

fix(deploy): a distinct exit code per deploy-on-box refusal

#9252aa570b3 filesalso tooling, docs

Precision batch 2026-10-03: twelve rule fixes from the Gluecron/Tallrig triage (#911-#923)

#92453d854d25 filesalso engine, tooling

accessibilityauthBypasscrossFileTaintenvVarshardcodedUrlnPlusOneperformancesecretsundefinedRef

fix(bashSafety): teardown and read-only diagnostics are warnings; one finding per swallowed line

#913c37c4203 filesalso engine

bashSafety

fix(corpus): judge rules, not today's advisory feed

#90882cd03e2 filesalso tooling

feat(security): client-identity-header and unowned-route-pool — Tallrig corpus 053, 050

#907d3dc9963 filesalso tests, tooling

Refresh website testing statistics — 2026-10-02

#8962405b454 filesalso tests

feat(security): lifecycle rules — Tallrig corpus 023, 029, 047, 048

#906e7ddda64 filesalso tests, tooling

security

feat(security): hard-coded host rules — Tallrig corpus 006 (P0), 011

#90583227d34 filesalso tests, tooling

security

feat(security): account-state rules — Tallrig corpus 043-046

#904d1ca3e34 filesalso tests, tooling

security

fix(bashSafety): an HTTP call whose response is discarded is a warning

#9031452c7a2 filesalso tests

bashSafety

fix(config): honour modules.<name>.enabled and modules.<name>.severity

#89813ac6a13 filesalso tests

fix(authBypass): a Hono c.json({…}, 401) is enforcement

#9019f9929e2 filesalso tests

authBypass

fix(errorSwallow): recognise consumed sentinels and callees that never reject

#90010d91474 filesalso tests

errorSwallow

feat(security): unscoped-lookup and soft-state-unfiltered (Tallrig corpus 010, 028)

#90298acc834 filesalso tests, tooling

security

feat(security): score GateTest against Tallrig's bug corpus; four detector families take it from 2.4% to 16.7%

#8976635bff11 filesalso tests, website, tooling

crossFileTainterrorSwallowsecurity

fix(scan): the paid scan page says what was not checked; e2e no longer crashes on custom scripts

#89959ef42d4 filesalso engine, tests

e2e

fix(forensic): $399 buyers get everything Scan + Fix gets, plus diagnosis and the executive summary

#894d6daa3e4 filesalso tests

fix(codeQuality): --fix only deletes lines that do nothing

#891173dd952 filesalso tests

codeQuality

fix(syntax): type-check workspace monorepos per package, never from the root base

#89280b72bb2 filesalso tests

syntax

fix(mcp): hosted fix_issue pays with the subscription key, so it can finally succeed

#89373254e36 filesalso tests

fix(unitTests): a passing test named after ENOENT no longer turns a red suite green

#890e9e2ac73 filesalso tests

unitTests

feat(ops): work claims on Gluecron leases — the medic and Claude sessions never overlap

#887ef1e3fa7 filesalso tooling, our CI, tests

fix(copy): stop selling the $99 Full Scan as all 122 modules — it runs 89

#88670b421820 filesalso CI integration, docs, tests

feat(domain): gatetest.ai and www.gatetest.ai redirect permanently to gatetest.io

#8853a5c59f3 filesalso tests

fix(billing): close the scan findings on the sales pause

#884950c83f3 files

fix(honesty): stop selling SOC 2 output and pen testing we do not provide

#8839b831cf41 filesalso engine, tests, docs, repo, CI integration

liveAuthBypassliveIdorlivePathTraversalliveSqlInjectionliveXss

feat(billing): sales pause switch — no paid checkout until the tiers are finished

#882abb347116 filesalso tests

fix(admin): buttons and panels stop reporting success when the call failed

#879919953d18 filesalso tests

fix(secrets): list every Tallrig and callback secret the site reads

#878ba5fee12 filesalso tests

feat(secrets): list every name set in the server env file

#881732a85e4 filesalso tests

feat(admin): live operations panel first, 30s auto-refresh, no green without data

#880578761d14 filesalso tests

fix(admin): typed text is readable in every admin input, light and dark

#8774d092c85 filesalso tests

Refresh website testing statistics — 2026-10-01

#874e422dd04 filesalso precision corpus

Flywheel trainer report — 2026-10-01

#873bd3d21c17 filesalso tests

feat(home): lead the hero with Install Gluecron

#869132ab9b2 filesalso tests

feat(admin): admin access for allowlisted, provider-verified email sign-ins

#8703ac165021 filesalso tests, docs

fix(deploy): OnFailure hook no longer masks pull-deploy's own reason

#871053f6165 filesalso tooling, docs

fix(security): advisories against the repo's own workspace packages do not block (main red on nest)

#8720695b4e4 filesalso website, tests

security

Refresh website testing statistics — 2026-09-30

#8637963bea2 files

Flywheel trainer report — 2026-09-30

#8628d9319817 filesalso tests

fix(signin): gate redirects to an absolute URL — protected pages no longer 500

#8643e47be02 filesalso tests

fix(stack): remove the Gluecron draft placeholders that went live

#861ac161db3 filesalso tests

fix(unit-tests): restore flaky-ledger imports and green-run recording dropped by the #857 update-branch merge

#859f2616fc3 filesalso tests, docs

unitTests

fix(corpus): apollo-server back to 0 blocking — CSRF rule reads assignments, test suites are harness

#858bd4b9eb6 filesalso tests

security

feat(diff): run only the tests the import graph touches (launch move 5)

#857c0cdd1213 filesalso docs, tests

integrationTestsunitTests

docs(handoff): 30 Sep 02:20Z RESUME block (ccantyusa) + admin design-round outputs

#852108d0a242 filesalso engine, website, repo, tests, tooling

unitTests

feat(tests): flaky-test ledger, expiring quarantine, flake rate on the badge (launch move 6)

#856663e51e22 filesalso website, docs, tests, tooling, repo

unitTests

fix(admin): repo scan never writes unasked and never reports a failure as a pass

#85540f04b010 filesalso tests