Bug-hunt round 9: guarded memory reads, a fail-closed resolution gate, and validated lint severities - #521

Merged

REPPL merged 12 commits into

mainfrom

bughunt-a/round-9

Aug 26, 2026

Commits on Aug 26, 2026

fix: memory-store reads route through the guarded primitive
REPPL
committed
9e8f323
fix: issue-resolution gate fails closed when git itself fails
REPPL
committed
b3d4c18
fix: lint config severities are validated and unknown keys refused
REPPL
committed
ac06c81
fix: docs lint renderer sanitises config-derived finding fields
REPPL
committed
b215c8c
fix: runBounded trims the trailing side only, keeping NUL-list bytes
REPPL
committed
89603e7
fix: privacy-hygiene warns on a tracked file it cannot open
REPPL
committed
e6f9005
docs: the sources corpus is a script MVP, not shipped behaviour
REPPL
committed
6d9a7b2
docs: the intake container recipe can actually build the module
REPPL
committed
7e27400
docs: site command description discloses check's render write
REPPL
committed
0458d58
chore: resolve round-9 bug-hunt records and log the round
REPPL
committed
99d82b6
fix: scope strict config decoding to the rule and token objects
REPPL
committed
c599c74
Merge origin/main into bughunt-a/round-9
REPPL
committed
ea0378a