Skip to content

Grand dashboard: integrity-wave gate rows (M2-M6), checkpoint 2026-09-28 - #457

Merged
seathatflowsinourveins merged 2 commits into
mainfrom
claude/grand-dashboard-integrity-gates-20260928
Sep 28, 2026
Merged

seathatflowsinourveins merged 2 commits into
mainfrom
claude/grand-dashboard-integrity-gates-20260928

Conversation

@seathatflowsinourveins

@seathatflowsinourveins seathatflowsinourveins commented Sep 28, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

This PR updates the public grand-dashboard checkpoint (observability/grand-dashboard/state.json), as AGENTS.md requires when accepted work changes a gate. It adds five gate rows for the integrity wave merged on 2026-09-28. Each row links to the record for its own work:

Gate id Plan move State Evidence
claude-code-sandbox-profile M6 Open gate, registered 2026-09-27 and merged 2026-09-28. Raised at every wave review. Re-check 2026-10-11. Not measured. catalogs/foundation/manifest.json (open gate registered in #448)
security-audit-skill-trial M5 Installed as name-only. M5b gate 1 passed: 65 of 65 upstream tests. Gates 2 and 3 are open. M5c waits on Gates A and B. evidence/artifacts/security-audit-host-install-20260928/receipt.json (#452)
actionlint-successor-trial M2 A non-required kjanat 1.17.0 job. The required gate stays on rhysd 1.7.12. evidence/artifacts/actionlint-successor-parity-20260927/receipt.json (#449)
betterleaks-successor-trial M3 A non-required, report-only 1.8.1 job. Not a superset on the fixtures. The required gitleaks gate is unchanged. The swap happens only if parity holds after triage. evidence/artifacts/betterleaks-parity-20260927/run-record.json (#455)
codeql-quality-suites M4 Default setup and suite kept. The switch to extended is deferred. docs/decisions/2026-09-27-codeql-quality-suites.md (#450)

Other changes:

  • recorded_at_utc is bumped.
  • state.json is re-registered in manifests/evidence.json, following the docs/lanes.md hot-file protocol.

Checks

These are our integration checks:

  • python3 scripts/validate.py: status: passed, 161 receipts.
  • python3 -m unittest tests.test_grand_dashboard: 16 tests OK.
  • progress.snapshot('.'): 104 rows, under MAX_ENTITIES 128. Every new row passes the evidence-reference and token checks.

Review

An independent read-only evidence-reviewer checked each clause against its linked evidence. It found two defects, both fixed in the second commit:

  • The sandbox gate's registration date was wrong. catalogs/foundation/manifest.json:254 says 2026-09-27.
  • The betterleaks swap condition was overstated. run-record.json says the swap happens only if parity holds.

Not covered: the reviewer did not read the live ruleset or the live default-setup state.

SOTA sources

  • This PR adds no new tool. Each row cites the upstream pins its receipt records:
    • cloudflare/security-audit-skill @ c1c8a8c1471069fb0e188eeaff69b8e8db6564a8;
    • kjanat/actionlint v1.17.0;
    • betterleaks/betterleaks v1.8.1;
    • github/codeql CLI 2.27.1.
  • The dashboard format comes from observability/grand-dashboard/progress.py, following the repository's own contract in observability/grand-dashboard/README.md.

🤖 Generated with Claude Code

…-09-28

Adds five gate rows for accepted work merged on 2026-09-28 (#448-#452, #455):
the open sandbox-profile gate, the security-audit skill trial, the actionlint and
betterleaks successor trials, and the CodeQL quality-suite decision. Each row links
its own receipt or decision. Re-registers state.json in manifests/evidence.json.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
@seathatflowsinourveins seathatflowsinourveins added the lane:foundation Foundation lane: Claude/Codex setup, hosts, memory, RAG, research, workers label Sep 28, 2026
…leaks swap condition

Independent review: the open gate was registered 2026-09-27 (catalogs/foundation/manifest.json:254),
and the betterleaks swap waits on parity after triage (run-record.json plan_move), not triage alone.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
@seathatflowsinourveins
seathatflowsinourveins merged commit 4a610e1 into main Sep 28, 2026
26 checks passed
@seathatflowsinourveins
seathatflowsinourveins deleted the claude/grand-dashboard-integrity-gates-20260928 branch September 28, 2026 11:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

lane:foundation Foundation lane: Claude/Codex setup, hosts, memory, RAG, research, workers

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant