tls!: the engine always serves TLS, minting a self-signed certificate on first run (BACKLOG #1276 part A, ADR 0172 supersedes ADR 0143) - #534

Open

wshallwshall wants to merge 48 commits into

mainfrom

claude/builder-1-1245-1276a

Commits on Aug 20, 2026

fix(auth,store): decide bootstrap identity from the stored row, not the caller's spelling (BACKLOG #1268)
wshallwshall
committed
f9837b8
docs(adr): ADR 0169 -- username identity is case-sensitive, and no identity decision may depend on store collation (BACKLOG #1268)
wshallwshall
committed
526e485
fix(hooks): wire the ledger parse refusal to the commit path, and report it instead of raising (BACKLOG #1259)
wshallwshall
committed
03d4494
backlog: close 1268 -- the collation and the gate, both limbs (lander-authored banner)
wshallwshall
committed
92d9002
backlog: retire #1259's inverted do-not-build banner, and record #1292's fifth sighting against its own argument
wshallwshall
committed
a663b89
Merge origin/main into claude/builder-1-160cec -- ADR index append collision
wshallwshall
committed
c6070a4
merge origin/main (4c28badd) into the builder-1 lane
wshallwshall
committed
263594e
fix(tooling): the citation gate's ANNOTATION asks the same predicate its EXIT CODE asks (BACKLOG #1235)
wshallwshall
committed
22ff4bb
Merge the builder-1 lane's 22ff4bba into the PR head -- two independent resolutions of one conflict
wshallwshall
committed
5627d4a
fix(worktree-gate): decide span ownership once, closing two escape-blind fail-opens (BACKLOG #1229 residual)
wshallwshall
committed
fb1f53c
merge origin/main into the builder-1 lane
wshallwshall
committed
b05b48f
merge the builder-1 lane into the PR head rather than force-pushing over it
wshallwshall
committed
1a7a31c
fix(tooling): refuse an empty population, and print the coverage bound on a clean run (BACKLOG #1235)
wshallwshall
committed
1972575
test(tooling): classify the escaped-quote gate test, which its own drift guard demanded
wshallwshall
committed
14d3c40
merge the builder-1 lane's #1235 empty-population fix into the PR head
wshallwshall
committed
1df8638
docs(test): correct an over-claim in my own escaped-quote suite (BACKLOG #1229 residual)
wshallwshall
committed
f2383dc
docs(tooling): record that the CI-wired citation gate is the SIBLING, not this one (BACKLOG #1235)
wshallwshall
committed
0642792
test(gate): cover the escape-blind scan across four rules, not one
wshallwshall
committed
49f425b
fix(worktree-gate): the backslash escape is HOST-SPECIFIC -- my own fix re-opened #1229 on PowerShell (BACKLOG #1229 residual)
wshallwshall
committed
4d46a2a
merge the #1229 host-specific escape fix with the four-rule coverage suite
wshallwshall
committed
ebdf030
fix(worktree-gate): the ARGUMENT extraction must agree with the blanking about where a span ends (BACKLOG #1229 residual)
wshallwshall
committed
c308cc3
test(gate): give each rule a hardened counterpart, so this file can fail both ways
wshallwshall
committed
e4c342c
docs(test): correct my own commit messages -- rules 3c and 3d ARE closed (BACKLOG #1229 residual)
wshallwshall
committed
7979ac6
fix(test): escape only the INVALID sequences -- the gate's own remedy would neuter this test (BACKLOG #1229 residual)
wshallwshall
committed
69b95d6
docs(test): name the inherited construct this fix makes inert (BACKLOG #1229 residual)
wshallwshall
committed
6d85ede

Commits on Aug 21, 2026

Commits on Aug 22, 2026