Skip to content

Repair DISA inventory acceptance and safe source rollback - #427

Draft
RAMBULLS wants to merge 4 commits into
mainfrom
fix/disa-public-inventory-20261111
Draft

RAMBULLS wants to merge 4 commits into
mainfrom
fix/disa-public-inventory-20261111

Conversation

@RAMBULLS

@RAMBULLS RAMBULLS commented Nov 11, 2026 •

Copy link
Copy Markdown
Owner

Draft-only DISA inventory and source-rollback repair. No source-data promotion, production witness admission, archive retrieval, incident closure, merge or deployment is authorized by a green draft test alone.

Current head: 9bb3a40, based on main 8b47ab6. The original 74bf54f candidate received independent static and tree-equivalence review. Its first hosted run passed Security, generated reproducibility, push audit, build, accessibility, visual and Windows process/source-transaction tests. Windows logs show 19 tests passing, including read-only rollback; checkout was GitHub's merge commit c2571f3 for the declared head. Unit and lint failures blocked acceptance.

Follow-up: replace control-character regexes with equivalent explicit code-point checks and test every C0/DEL character in literal and encoded paths; align the unknown-edition rejection test with the actual fail-closed diagnostic; correct fixture totals on pages 1–10 where retained DOM footer text concatenated 417 with pagination buttons. The fixture retains original capture hashes and records the correction basis; all 28 pages contain 417 rows and the final page states 417. No raw capture, validator, approved host, archive bound, freshness timestamp or production witness is changed.

Hosted checks and independent final review of this follow-up are pending. The 417-row fixture remains test evidence only. Actual archive-byte/native-output reconciliation remains incomplete. Keep incidents #255 and #419 open. Responsible AI quarantine is separate and untouched.

Latest hosted result: the focused control-character tests passed, but an unnecessary separator-regex escape failed lint. The follow-up uses explicit slash/backslash membership tests with identical rejection behavior. The retained full-inventory test still fails closed on File-2032's literal https://dl.dod.cyber.mil//wp-content/uploads/stigs/zip/U_Omnissa_Horizon_Y26M09_STIG.zip location. No host/path guard, filename or publisher evidence was weakened or rewritten to suppress that failure. Governed archive-location/source reconciliation and independent review remain unresolved.

The next hosted lint pass reached a pre-existing stalled-body fixture with an async generator lacking a yield expression. Its unresolving await is now the operand of yield, preserving the never-resolving body and timeout assertion while satisfying require-yield. The archive-location/source reconciliation blocker remains unchanged. New hosted checks and independent final review are pending.

Prepare the independently reviewed DISA v2 candidate for draft hosted tests. Bind complete public inventory witnesses and native acceptance, preserve retained retrieval provenance, and fail closed on incomplete transaction rollback. Required new tests are registered; no local execution or source recovery is claimed.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant