timothyandClaude Fable 5.1 61ed6a7955 test(885): exercise REGISTRY_PASSWORD at both if: levels, re-confirm the layer measurement ...

Round-nine's bare-if fix table paired each secret name with only one level
(job for REGISTRY_PASSWORD, step for RENOVATE_TOKEN), so the exact
REGISTRY_PASSWORD-at-step-level and RENOVATE_TOKEN-at-job-level cases the
finding named were never driven. All four combinations now run.

The decision record's anonymous-layer-download closure read as reporting a
past run without saying who ran it. Re-measured directly this session
(2026-09-05, no stored credential): anonymous token -> pinned manifest's
first layer -> 200/32991280 bytes, same GET with no token -> 401. Record
updated to say the leg was re-confirmed, not merely "measured...since".

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015QqCpYFsKgnAnx6jVwrKiV

2026-09-05 15:15:44 +02:00

..

lib

fix(876): sweep session narrative out of hooks, workflows, scripts, tests and code comments; grow the detector to the process corpus

2026-09-03 20:51:39 +02:00

macOS

fix mac builds (#1557)

2024-01-15 10:29:07 -06:00

scripted-schedules

feat(780): commit a ruff config and enforce it in CI (#813)

2026-08-22 00:33:18 +00:00

tests

test(885): exercise REGISTRY_PASSWORD at both if: levels, re-confirm the layer measurement

2026-09-05 15:15:44 +02:00

__init__.py

feat(521): decision-record parser (decisions_lib)

2026-07-21 02:58:58 +02:00

add-migration.sh

fix interlaced check again (#2623)

2025-11-10 09:14:40 -06:00

build_decisions_catalog.py

fix(610): catalog path links only for the split layout, not every file under docs/decisions

2026-07-25 19:08:58 +02:00

check-doc-narrative.py

docs(881): rewrap the comment the narrowed claim left ragged

2026-09-05 05:32:13 +02:00

check-kickoff-guard.sh

feat(520): parallel orientation+selection startup; retire #237 as live state; #642 retrieval bullets [decisions-edit]

2026-07-21 11:48:14 +02:00

check-local-lsp.sh

fix(777): repair both broken LSPs, and name the surface a subagent can actually reach (#793)

2026-08-14 15:55:20 +00:00

check-required-contexts.sh

fix(876): sweep session narrative out of hooks, workflows, scripts, tests and code comments; grow the detector to the process corpus

2026-09-03 20:51:39 +02:00

check-review-verdict.sh

fix(876): sweep session narrative out of hooks, workflows, scripts, tests and code comments; grow the detector to the process corpus

2026-09-03 20:51:39 +02:00

ci-detect-already-validated.sh

fix(885): a head-authored run may hold no stored secret, so the PR route reads the registry and the status API anonymously

2026-09-05 15:15:42 +02:00

ci-detect-docs-only.sh

fix(836): never pass --depth to a checkout that may already be complete (#884)

2026-08-29 23:55:29 +00:00

ci-peak-anon.sh

ci(412): sample true peak-anon in the test job, not cache-inflated memory.peak

2026-07-19 20:49:08 +02:00

ci-prove-ban-detects.sh

fix(876): sweep session narrative out of hooks, workflows, scripts, tests and code comments; grow the detector to the process corpus

2026-09-03 20:51:39 +02:00

ci-step-ran.sh

fix(876): sweep session narrative out of hooks, workflows, scripts, tests and code comments; grow the detector to the process corpus

2026-09-03 20:51:39 +02:00

ci-toolchain-image-resolves.sh

docs(885): an unmeasured failure TIME, replaced by the structural fact it stood for

2026-09-05 15:15:43 +02:00

cleanup-all-code.sh

remove v2 ui and node (#1564)

2024-01-16 13:28:46 -06:00

cleanup-code.sh

remove v2 ui and node (#1564)

2024-01-16 13:28:46 -06:00

decisions_lib.py

fix(610): make the frontmatter READ path dependency-free — CI has no PyYAML

2026-07-25 19:57:22 +02:00

decisions_validate.py

fix(876): sweep session narrative out of hooks, workflows, scripts, tests and code comments; grow the detector to the process corpus

2026-09-03 20:51:39 +02:00

e2e-functional.sh

test(444): deterministic functional-E2E for the playout-build lock 409 + isLocked projection

2026-07-19 17:37:50 +02:00

e2e-local.sh

fix(445): silent-pass on spec failure + prove server ownership via pidfile [decisions-edit]

2026-07-25 14:04:52 +02:00

e2e-ui.sh

fix(744,835): ci-image.yml publishes from main only; guard persist-credentials with no exemption (#857)

2026-08-27 20:44:44 +00:00

generate-endpoint-index.py

feat(780): commit a ruff config and enforce it in CI (#813)

2026-08-22 00:33:18 +00:00

hook-fire-log.sh

fix(876): sweep session narrative out of hooks, workflows, scripts, tests and code comments; grow the detector to the process corpus

2026-09-03 20:51:39 +02:00

issue-qualification-audit.sh

chore(process): #312 H12 — session-end issue-qualification audit

2026-07-12 20:21:20 +02:00

jq-preflight.sh

fix(876): sweep session narrative out of hooks, workflows, scripts, tests and code comments; grow the detector to the process corpus

2026-09-03 20:51:39 +02:00

mcp_smoke.py

fix(876): sweep session narrative out of hooks, workflows, scripts, tests and code comments; grow the detector to the process corpus

2026-09-03 20:51:39 +02:00

migrate_decisions_split.py

feat(610): split the decision corpus into one YAML-frontmatter file per record

2026-07-25 19:45:09 +02:00

migration-smoke.sh

ci(406): apply the memory-swap rule to our own two sites; stop leaning on the peak reading [decisions-edit]

2026-07-17 16:13:39 +02:00

post-review-verdict.sh

fix(881): a mutation-outcome claim is executed wherever it is written, bound to the sentence that makes it

2026-09-05 04:44:28 +02:00

pr-changed-files.sh

fix(876): sweep session narrative out of hooks, workflows, scripts, tests and code comments; grow the detector to the process corpus

2026-09-03 20:51:39 +02:00

prove-fix.sh

fix(876): sweep session narrative out of hooks, workflows, scripts, tests and code comments; grow the detector to the process corpus

2026-09-03 20:51:39 +02:00

refresh-shared-checkout.sh

chore(541): fast-forward the shared checkout at session end (H13)

2026-07-21 20:02:57 +02:00

security-scan.sh

ci(338): distinguish ZAP warning (exit 2) from failure (exit 1) in security-scan (#452)

2026-07-18 16:16:41 +00:00

select-queue.sh

fix(553): exclude bot-authored issues from the queue selector

2026-07-22 17:01:46 +02:00

set-provider.sh

add playback troubleshooting speed indicator (#2521)

2025-10-13 11:25:56 -05:00

update-openapi.sh

docs(578): record the update-openapi.sh incremental-skip trap that made my own check vacuous

2026-07-27 03:10:36 +02:00