Repository navigation
Conversation
Prepare the independently reviewed DISA v2 candidate for draft hosted tests. Bind complete public inventory witnesses and native acceptance, preserve retained retrieval provenance, and fail closed on incomplete transaction rollback. Required new tests are registered; no local execution or source recovery is claimed.
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Draft-only DISA inventory and source-rollback repair. No source-data promotion, production witness admission, archive retrieval, incident closure, merge or deployment is authorized by a green draft test alone.
Current head: 9bb3a40, based on main 8b47ab6. The original 74bf54f candidate received independent static and tree-equivalence review. Its first hosted run passed Security, generated reproducibility, push audit, build, accessibility, visual and Windows process/source-transaction tests. Windows logs show 19 tests passing, including read-only rollback; checkout was GitHub's merge commit c2571f3 for the declared head. Unit and lint failures blocked acceptance.
Follow-up: replace control-character regexes with equivalent explicit code-point checks and test every C0/DEL character in literal and encoded paths; align the unknown-edition rejection test with the actual fail-closed diagnostic; correct fixture totals on pages 1–10 where retained DOM footer text concatenated 417 with pagination buttons. The fixture retains original capture hashes and records the correction basis; all 28 pages contain 417 rows and the final page states 417. No raw capture, validator, approved host, archive bound, freshness timestamp or production witness is changed.
Hosted checks and independent final review of this follow-up are pending. The 417-row fixture remains test evidence only. Actual archive-byte/native-output reconciliation remains incomplete. Keep incidents #255 and #419 open. Responsible AI quarantine is separate and untouched.
Latest hosted result: the focused control-character tests passed, but an unnecessary separator-regex escape failed lint. The follow-up uses explicit slash/backslash membership tests with identical rejection behavior. The retained full-inventory test still fails closed on File-2032's literal
https://dl.dod.cyber.mil//wp-content/uploads/stigs/zip/U_Omnissa_Horizon_Y26M09_STIG.ziplocation. No host/path guard, filename or publisher evidence was weakened or rewritten to suppress that failure. Governed archive-location/source reconciliation and independent review remain unresolved.The next hosted lint pass reached a pre-existing stalled-body fixture with an async generator lacking a yield expression. Its unresolving await is now the operand of yield, preserving the never-resolving body and timeout assertion while satisfying require-yield. The archive-location/source reconciliation blocker remains unchanged. New hosted checks and independent final review are pending.