[#1276 follow-up] Lint provisioning: installer digest-tuple + before-Claude tool install + setup lint_mode + review-runner isolation - #1963

Merged

The01Geek merged 34 commits into

mainfrom

issue-1388-1276-follow-up-lint-provisioning-installer-digest

Aug 26, 2026

Commits on Aug 25, 2026

feat: implement issue #1388 — lint-provisioning Python core (install_state + lint_provision) (checkpoint)
github-actions[bot]
committed
7b63749
feat: implement issue #1388 — provision-lint-tools.sh helper + end-to-end fail-closed tests (checkpoint)
github-actions[bot]
committed
87be033
feat: implement issue #1388 — lint_mode composite-action input + three-workflow wiring + review-runner trusted-base isolation (checkpoint)
github-actions[bot]
committed
a48c3cd
feat: implement issue #1388 — tracked digest-bound install-state marker + generator + drift gate + .gitignore re-include (checkpoint)
github-actions[bot]
committed
c6e5b80
feat: implement issue #1388 — install.sh ships manifest + publishes marker; vendor-slice ships both; record-path skew support (checkpoint)
github-actions[bot]
committed
168411c
feat: implement issue #1388 — CI candidate-manifest job (no write creds) + gitignore comment reconcile (checkpoint)
github-actions[bot]
committed
457e0d9
fix: reconcile devflow-runner provision count pins for #1388 hardening step; ruff noqa (checkpoint)
github-actions[bot]
committed
5767bb3
feat: implement issue #1388 — §2.3 sweep reconciliation, coverage-map registration, marker regen
github-actions[bot]
committed
ee0e5bb
chore: mark lint_provision.py executable (#1388)
github-actions[bot]
committed
3cd6590
Merge remote-tracking branch 'origin/main' into issue-1388-1276-follow-up-lint-provisioning-installer-digest
github-actions[bot]
committed
5ed52b4
chore: add changeset for issue #1388 lint provisioning (#1963)
github-actions[bot]
committed
d2d43bb
refactor: address /simplify findings for issue #1388 (whole-dir review-runner hardening, single --version exec, exit-code clarity)
github-actions[bot]
committed
c066ff5
fix: address review findings for issue #1388 (iteration 1) — whole-token version match, cache-path honesty, Plan/StateResult/Readiness invariant guards, +zip/reuse/matrix tests
github-actions[bot]
committed
f91cdaa
fix: wire actions/cache for AC5 — cache restores now re-verified under the {OS,arch,tool,version,digest,installer} key (#1388)
github-actions[bot]
committed
72c223c
docs: update documentation for issue #1388
github-actions[bot]
committed
949de2d
Merge remote-tracking branch 'origin/main' into issue-1388-1276-follow-up-lint-provisioning-installer-digest
github-actions[bot]
committed
3471e1c
fix: installer-wiring #959 fixture carries the two new copy-list files (#1388 slice) so DEVFLOW_VENDOR install lands
github-actions[bot]
committed
9d522ea
feat: pre-provisioned-runner reuse + unsupported-platform degrade in provision-lint-tools.sh
The01Geek
committed
4bbff4c
fix: backfill measured sha256 digests in lint-manifest.json
The01Geek
committed
33e4037
docs: CLAUDE.md convention — design for consumer custom runners incl. Windows

The01Geek
and
claude
committed
e0d3478
test(ci): exercise real lint-provisioning downloads and regenerate install-state marker
The01Geek
committed
41da42e
fix(test): derive #1388 shellcheck digest assertion from the manifest, not a stale literal
The01Geek
committed
a0c914c
Merge origin/main into issue-1388 lint-provisioning branch (resolve append-append conflict in test_python_scripts.py)

The01Geek
and
claude
committed
20f9117

Commits on Aug 26, 2026

Merge remote-tracking branch 'origin/main' into pr-1963-review-reception
The01Geek
committed
9a48a4c
fix: address PR #1963 review findings (reception pass)

The01Geek
and
claude
committed
399aea3
test: reconcile installer-wiring coupled literals for the new #1388 4b arms

The01Geek
and
claude
committed
a81c47d
fix: address PR #1963 round-2 review findings

The01Geek
and
claude
committed
dbf1330
fix: address PR #1963 round-3 review findings (unknown-tool fail-closed, hardensetup e2e coverage, verdict-type hardening)

The01Geek
and
claude
committed
64c4be4
Merge branch 'main' into issue-1388-1276-follow-up-lint-provisioning-installer-digest
The01Geek
authored
743cdef
fix: address review findings on #1963 (iteration 1)

The01Geek
and
claude
committed
a50e50b
Merge remote-tracking branch 'origin/main' into worktree-pr-1963
The01Geek
committed
36c4f83
fix: repair the three CI failures the first fix round introduced

The01Geek
and
claude
committed
1331341
fix: raise installer-wiring's exact assertion floor to 304

The01Geek
and
claude
committed
bb40477
Merge remote-tracking branch 'origin/main' into worktree-pr-1963
The01Geek
committed
f8a3e84

Navigation Menu

[#1276 follow-up] Lint provisioning: installer digest-tuple + before-Claude tool install + setup lint_mode + review-runner isolation - #1963

[#1276 follow-up] Lint provisioning: installer digest-tuple + before-Claude tool install + setup lint_mode + review-runner isolation#1963
The01Geek merged 34 commits into
mainfrom
issue-1388-1276-follow-up-lint-provisioning-installer-digest

Commits on Aug 25, 2026

feat: implement issue #1388 — lint-provisioning Python core (install_state + lint_provision) (checkpoint)

feat: implement issue #1388 — provision-lint-tools.sh helper + end-to-end fail-closed tests (checkpoint)

feat: implement issue #1388 — lint_mode composite-action input + three-workflow wiring + review-runner trusted-base isolation (checkpoint)

feat: implement issue #1388 — tracked digest-bound install-state marker + generator + drift gate + .gitignore re-include (checkpoint)

feat: implement issue #1388 — install.sh ships manifest + publishes marker; vendor-slice ships both; record-path skew support (checkpoint)

feat: implement issue #1388 — CI candidate-manifest job (no write creds) + gitignore comment reconcile (checkpoint)

fix: reconcile devflow-runner provision count pins for #1388 hardening step; ruff noqa (checkpoint)

feat: implement issue #1388 — §2.3 sweep reconciliation, coverage-map registration, marker regen

chore: mark lint_provision.py executable (#1388)

Merge remote-tracking branch 'origin/main' into issue-1388-1276-follow-up-lint-provisioning-installer-digest

chore: add changeset for issue #1388 lint provisioning (#1963)

refactor: address /simplify findings for issue #1388 (whole-dir review-runner hardening, single --version exec, exit-code clarity)

fix: address review findings for issue #1388 (iteration 1) — whole-token version match, cache-path honesty, Plan/StateResult/Readiness invariant guards, +zip/reuse/matrix tests

fix: wire actions/cache for AC5 — cache restores now re-verified under the {OS,arch,tool,version,digest,installer} key (#1388)

docs: update documentation for issue #1388

Merge remote-tracking branch 'origin/main' into issue-1388-1276-follow-up-lint-provisioning-installer-digest

fix: installer-wiring #959 fixture carries the two new copy-list files (#1388 slice) so DEVFLOW_VENDOR install lands

feat: pre-provisioned-runner reuse + unsupported-platform degrade in provision-lint-tools.sh

fix: backfill measured sha256 digests in lint-manifest.json

docs: CLAUDE.md convention — design for consumer custom runners incl. Windows

test(ci): exercise real lint-provisioning downloads and regenerate install-state marker

fix(test): derive #1388 shellcheck digest assertion from the manifest, not a stale literal

Merge origin/main into issue-1388 lint-provisioning branch (resolve append-append conflict in test_python_scripts.py)

Commits on Aug 26, 2026

Merge remote-tracking branch 'origin/main' into pr-1963-review-reception

fix: address PR #1963 review findings (reception pass)

test: reconcile installer-wiring coupled literals for the new #1388 4b arms

fix: address PR #1963 round-2 review findings

fix: address PR #1963 round-3 review findings (unknown-tool fail-closed, hardensetup e2e coverage, verdict-type hardening)

Merge branch 'main' into issue-1388-1276-follow-up-lint-provisioning-installer-digest

fix: address review findings on #1963 (iteration 1)

Merge remote-tracking branch 'origin/main' into worktree-pr-1963

fix: repair the three CI failures the first fix round introduced

fix: raise installer-wiring's exact assertion floor to 304

Merge remote-tracking branch 'origin/main' into worktree-pr-1963