timothy/ersatztv
1
0
Fork 0
Code Issues 57 Pull Requests 6 Actions Packages Projects Releases 9 Wiki Activity

probe(698): route-1 POST-FIX verification — DO NOT MERGE #709

Closed
timothy wants to merge 2 commits from probe698d/head-H into main
pull from: probe698d/head-H
merge into: :main
Conversation 1 Commits 2 Files Changed 2
+4
timothy commented 2026-07-30 21:22:44 +02:00
Owner
Copy Link
Copy Source

Re-runs the ersatztv#698 route-1 attack against the FIXED gate now on main. Before the fix this produced h10=success (Exempt: docs-only) over a diff containing a C# file. Expected now: NO exemption. Will be closed and branches deleted.

Re-runs the ersatztv#698 route-1 attack against the FIXED gate now on `main`. Before the fix this produced `h10=success` (Exempt: docs-only) over a diff containing a C# file. Expected now: NO exemption. Will be closed and branches deleted.
timothy changed target branch from main to probe698d/base-S 2026-07-30 21:23:04 +02:00
timothy changed target branch from probe698d/base-S to main 2026-07-30 21:24:46 +02:00
timothy added 2 commits 2026-07-30 21:24:46 +02:00
probe(698): post-fix scratch base carrying a code file (do not merge) eb3d8d2aaf
probe(698): post-fix docs-only delta (do not merge)
PR Gates / CI image pin matches docker/ci (pull_request) Successful in 22s
Details
PR Gates / decisions lifecycle (pull_request) Successful in 31s
Details
PR Gates / Docs update reminder (pull_request) Successful in 28s
Details
Build ErsatzTV Image / Formatting (changed .cs conform to .editorconfig) (pull_request) Failing after 1m8s
Details
PR Gates / Script tests (pytest) (pull_request) Successful in 1m5s
Details
Build ErsatzTV Image / API docs in sync (OpenAPI + endpoint index) (pull_request) Successful in 1m38s
Details
review-verdict/h10 Awaiting review verdict for 8db14d3
Details
Build ErsatzTV Image / Functional E2E (curl + UI contracts) (pull_request) Successful in 5m58s
Details
Review verdict / Set review-verdict status (pull_request_target) Failing after 11m48s
Details
Build ErsatzTV Image / EF migration integrity (SQLite + MySql) (pull_request) Successful in 20m30s
Details
Build ErsatzTV Image / Build & test (.NET) (pull_request) Successful in 22m38s
Details
Build ErsatzTV Image / Build & push image (amd64) (pull_request) Has been skipped
Details
8db14d3530
timothy commented 2026-07-30 21:25:33 +02:00
Author
Owner
Copy Link
Copy Source

Route 1 POST-FIX verification — the fix works. Closing.

Same attack as probe #703, run against the fixed gate now on main:

before (#703) after (this PR)
review-verdict/h10 success — Exempt: docs-only change pending — Awaiting review verdict for 8db14d3

…on a PR whose diff against main contains ErsatzTV.Core/Probe698/PostFixMarker.cs.

Two further things this run confirms live:

  1. branches: [main] holds — while the PR targeted the scratch base, NO h10 was written at all (fail-closed, and it removes the #663 sha-inheritance hazard).
  2. edited fires on retarget and reclassifies — the status appeared only after the retarget back to main, which is the mechanism that makes a forged exemption non-persistent. Note the honest limit recorded in ci.exemption-provenance: this is detection, not atomicity; the ordering residual is #706.

Closed unmerged; branches deleted.

**Route 1 POST-FIX verification — the fix works. Closing.** Same attack as probe #703, run against the fixed gate now on `main`: | | before (#703) | after (this PR) | |---|---|---| | `review-verdict/h10` | `success` — *Exempt: docs-only change* | `pending` — *Awaiting review verdict for 8db14d3* | …on a PR whose diff against `main` contains `ErsatzTV.Core/Probe698/PostFixMarker.cs`. Two further things this run confirms live: 1. **`branches: [main]` holds** — while the PR targeted the scratch base, NO `h10` was written at all (fail-closed, and it removes the #663 sha-inheritance hazard). 2. **`edited` fires on retarget and reclassifies** — the status appeared only after the retarget back to `main`, which is the mechanism that makes a forged exemption non-persistent. Note the honest limit recorded in `ci.exemption-provenance`: this is detection, not atomicity; the ordering residual is #706. Closed unmerged; branches deleted.
timothy closed this pull request 2026-07-30 21:25:35 +02:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
ad-hoc
One-off / ad-hoc work not tracked by a dedicated issue
 api
REST API / HTTP endpoints
 bug
Something isn't working
 ci-cd
Build, test, deploy pipeline
 content
Channel content / schedules / playlists
 dependencies
Dependency updates (Renovate)
 enhancement
New feature or improvement
 frontend
ChicoryTV React SPA frontend
 in-progress
Claimed by an active session — do not pick up
 jellyfin
Jellyfin tuner / IPTV integration
 parked
Excluded from automatic queue pickup; work only when explicitly selected
 priority: high
priority: low
priority: medium
review
Adversarial review finding
 security
Security / vulnerability fix
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
renovate timothy (Timothy)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: timothy/ersatztv#709