Add release evidence live audit report bundle#270
Merged
Conversation
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
Claude Code Review
This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.
Tip: disable this comment in your organization's Code Review settings.
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (5)
✅ Files skipped from review due to trivial changes (5)
📝 WalkthroughWalkthroughAdds a retained no‑secret release evidence live audit report bundle: deterministic JSON/Markdown reports with snapshot paths and SHA‑256 digests, command provenance, and readiness warnings; wired into the audit CLI, validated by tests, enforced in readiness checks, and documented with manifest/checksum updates. ChangesRelease Evidence Live Audit Report Bundle
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~25 minutes Possibly related issues
Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
Contributor
Author
|
@coderabbitai review |
✅ Action performedReview finished.
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
Caution
Some comments are outside the diff and can’t be posted inline due to platform limitations.
⚠️ Outside diff range comments (1)
docs/tooling.md (1)
183-188:⚠️ Potential issue | 🟡 Minor | ⚡ Quick winDocument the report bundle's repo target everywhere it is described.
The retained live-audit report contract in the PR objectives includes the repository target, but these descriptions currently enumerate the other retained fields and omit that one. Please add it so the operator docs stay aligned with the generated report schema.
docs/tooling.md#L183-L188: mention the repo target in the high-level report-bundle summary.docs/tooling.md#L259-L270: include the repo target alongside the snapshot paths, digests, provenance, and checker results.release-artifacts/README.md#L183-L188: mirror the same field in the release-artifacts summary.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In `@docs/tooling.md` around lines 183 - 188, The report-bundle descriptions omit the "repo target" field—add it to each location so docs match the retained live-audit report contract: in docs/tooling.md (lines 183-188) update the high-level report-bundle summary to mention the repository target alongside the regenerated manifest and the architecture/threat-model validation; in docs/tooling.md (lines 259-270) add the repo target to the detailed list that currently enumerates snapshot paths, digests, provenance, and checker results so it appears as an explicit retained field; in release-artifacts/README.md (lines 183-188) mirror the same addition in the release-artifacts summary so the repo target is listed together with the other retained fields.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@ops/AUTONOMOUS_RUN.md`:
- Around line 35-39: Update the durable state metadata for Queue Item 129 so it
reflects the actual open PR instead of "TBD": change the "Active PR" field from
TBD to the opened pull request URL (use the repo's PR `#270` link) and ensure any
other metadata rows for Queue Item 129 (the "Active PR" entry shown earlier and
the duplicate block later around lines referenced in the review) are updated to
the same PR URL so the autonomous run state consistently shows PR `#270` rather
than TBD.
---
Outside diff comments:
In `@docs/tooling.md`:
- Around line 183-188: The report-bundle descriptions omit the "repo target"
field—add it to each location so docs match the retained live-audit report
contract: in docs/tooling.md (lines 183-188) update the high-level report-bundle
summary to mention the repository target alongside the regenerated manifest and
the architecture/threat-model validation; in docs/tooling.md (lines 259-270) add
the repo target to the detailed list that currently enumerates snapshot paths,
digests, provenance, and checker results so it appears as an explicit retained
field; in release-artifacts/README.md (lines 183-188) mirror the same addition
in the release-artifacts summary so the repo target is listed together with the
other retained fields.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: defaults
Review profile: CHILL
Plan: Pro
Run ID: 84889f3f-b5db-4461-873f-2cab60ec1489
📒 Files selected for processing (14)
CHANGELOG.mddocs/public-beta-evidence.mddocs/release-readiness.mddocs/tooling.mdops/AUTONOMOUS_RUN.mdops/ROADMAP.mdrelease-artifacts/README.mdrelease-artifacts/latest/SHA256SUMSrelease-artifacts/latest/release-checksums.jsonrelease-artifacts/latest/release-manifest.jsonscripts/audit_release_evidence_issue_snapshots.pyscripts/check_release_readiness.pyscripts/test_release_evidence_issue_snapshot_audit.pyscripts/test_release_readiness.py
Contributor
Author
|
@coderabbitai review |
✅ Action performedReview finished.
|
This was referenced Jun 13, 2026
punk6529
added a commit
that referenced
this pull request
Jun 13, 2026
This was referenced Jun 13, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Readiness posture
This remains an operator-only live audit enhancement. CI continues to use mocked/no-network coverage, and this PR does not mark public-beta or production-release retained evidence complete.
Closes #269
Validation
python scripts/test_release_evidence_issue_snapshot_audit.pypython scripts/test_release_readiness.pypython scripts/check_release_readiness.pypython scripts/audit_release_evidence_issue_snapshots.py --helppython -m py_compile scripts\audit_release_evidence_issue_snapshots.py scripts\test_release_evidence_issue_snapshot_audit.py scripts\check_release_readiness.py scripts\test_release_readiness.pypython scripts/generate_release_manifest.py --checkpython scripts/generate_release_checksums.py --checkpython scripts/check_changelog.pyrg -n "release evidence live audit report bundle|release-evidence-live-audit-report|Queue Item 128|Queue Item 129|PR #268|27478649600|bb36ddb|ce9f2ea|#267|#269|Last verified|CI run" ops/ROADMAP.md ops/AUTONOMOUS_RUN.md docs/tooling.md docs/public-beta-evidence.md docs/release-readiness.md release-artifacts/README.md CHANGELOG.mdrg -n "^#|^##|^###" ops/ROADMAP.md ops/AUTONOMOUS_RUN.md docs/tooling.md docs/public-beta-evidence.md docs/release-readiness.md release-artifacts/README.mdgit diff --checkpowershell -ExecutionPolicy Bypass -File scripts\check.ps1Summary by CodeRabbit
New Features
Documentation
Tests
Chores