security(actions): detect transport-only verdict poll bounds - #1088

Open

seonghobae wants to merge 93 commits into

sentinel/detect-transport-only-poll-bound-1087

Commits on Sep 2, 2026

test(actions): pin vulnerable transport-only verdict poll
seonghobae
committed
a0130f4
test(actions): pin fixed verdict poll deadline
seonghobae
committed
43e63be
test(actions): define transport-only poll detector contract
seonghobae
committed
fc9190c
feat(actions): detect transport-only verdict polling bounds
seonghobae
committed
023782b
docs(security): trace verdict-poll capacity defect
seonghobae
committed
7d60c92
docs(changelog): record bounded poll detector
seonghobae
committed
0c79c61
test(actions): keep polling bounds scoped to owning job
seonghobae
committed
32e23a8
fix(actions): scope verdict poll bounds to owning job
seonghobae
committed
f9d4195
docs(actions): bind poll safety evidence to owning job
seonghobae
committed
74f16eb
test(actions): pin polling scope review boundaries
seonghobae
committed
148458b
fix(actions): require one executable polling loop
seonghobae
committed
87db6be
docs(actions): trace executable polling-loop boundary
seonghobae
committed
1ca346e
test(actions): cover reordered same-job timeout
seonghobae
committed
e0d48a5
fix(actions): honor owning job timeout regardless of key order
seonghobae
committed
4feb533
test(actions): cover late same-job timeout
seonghobae
committed
e56aae2
test(actions): cover late owning-job timeouts
seonghobae
committed
119e949
fix(actions): scan full job for timeout
seonghobae
committed
edf2b52
test(actions): define renamed transport-budget contract
seonghobae
committed
57e683a
feat(actions): detect renamed transport-only retry budgets
seonghobae
committed
36f184d
docs(actions): trace renamed retry-budget detection
seonghobae
committed
3b4ea19
docs(changelog): record alias-safe poll detection
seonghobae
committed
df51306
test(actions): bound renamed polls by causal guards
seonghobae
committed
e2fb93c
fix(actions): recognize renamed total poll guards
seonghobae
committed
b68568a
test(actions): require causal total poll guards
seonghobae
committed
92c4b63
fix(actions): require initialized total poll guards
seonghobae
committed
cb12b27
test(actions): reject late total-bound initialization
seonghobae
committed
86eb50c
refactor(actions): isolate generic transport-budget detector
seonghobae
committed
95bb935
fix(actions): require pre-loop total-bound state
seonghobae
committed
4b0e757
test(security): pin poll-bound review regressions
seonghobae
committed
bad9d32
feat(security): structurally analyze Actions poll bounds
seonghobae
committed
99a2302
chore(security): drop unused analyzer draft
seonghobae
committed
d5e5589
fix(security): require causal historical poll bounds
seonghobae
committed
4a948df
fix(security): localize generic poll-bound state
seonghobae
committed
9e54673
docs(security): record poll-bound causal boundaries
seonghobae
committed
7196e44
docs(security): bind polling safety to exact loop
seonghobae
committed
ccb8000
test(security): pin mixed-name poll safety
seonghobae
committed
b7618f6
fix(security): accept renamed historical poll bounds
seonghobae
committed
3ca23fa
docs(security): record identifier-agnostic poll safety
seonghobae
committed
11bcff8
docs(security): record renamed polling safety state
seonghobae
committed
c3cb796
perf(security): prefilter generic poll detector
seonghobae
committed
cdd24c9
test(security): pin poll command whitespace variants
seonghobae
committed
34a37ec
fix(security): preserve gh command whitespace detection
seonghobae
committed
327b154
fix(security): preserve generic gh whitespace detection
seonghobae
committed
23db570
test(security): pin mutable poll bound bypasses
seonghobae
committed
de84e5b
test(security): keep poll mutation fixtures loop-local
seonghobae
committed
3fe5249
test(security): pin invalid break-zero poll bypass
seonghobae
committed
5c64e24
fix(security): detect mutable total poll bounds
seonghobae
committed
71e2617
feat(security): detect ineffective mutable poll bounds
seonghobae
committed
a3884b0
test(security): bind break-zero regression to companion
seonghobae
committed
b4a134e
feat(security): isolate invalid break-zero poll detector
seonghobae
committed
b09140b
chore(security): preserve canonical mutable-bound detector
seonghobae
committed
077121b
docs(security): record mutable-bound and break-zero companions
seonghobae
committed
a56f2b3
docs(security): trace mutable poll bounds and break-zero
seonghobae
committed
0136677
test(security): keep large polling job workflow valid
seonghobae
committed
f293da0
test(security): pin polling loop locality and quoted command boundaries
seonghobae
committed
2529fc5
fix(security): drop unsound break-zero companion
seonghobae
committed
d94effe
test(security): remove shell-ambiguous break-zero oracle
seonghobae
committed
6868b10
docs(security): narrow break semantics to proven shell behavior
seonghobae
committed
960536f
docs(security): remove unsound break-zero coverage claim
seonghobae
committed
95d6afc
test(security): distinguish deadline tightening from refresh
seonghobae
committed
cdd4b90
fix(security): distinguish deadline extension from tightening
seonghobae
committed
8496b21
test(security): pin conditional exit and retry declaration boundaries
seonghobae
committed
f289096
fix(security): require executable gh api poll evidence
seonghobae
committed
c86f7c9
fix(security): preserve conditional poll back edges
seonghobae
committed
c49c943
fix(security): distinguish conditional poll termination
seonghobae
committed
e4e4cf8
fix(security): accept reversed retry declarations
seonghobae
committed
fe312dc
test(security): pin reversed safety and deadline guard precision
seonghobae
committed
2f3fd77
fix(security): require expiration-direction deadline guard
seonghobae
committed
5ce4114
fix(security): accept reversed total-bound declarations
seonghobae
committed
89efd14
test(security): pin unreachable poll-bound exits
seonghobae
committed
ba2b030
security(actions): detect unreachable poll-bound exits
seonghobae
committed
87ec49f
docs(security): trace unreachable poll-bound exits
seonghobae
committed
52ab761
test(actions): reject unreachable polling continues
seonghobae
committed
f0ba2c5
fix(actions): require reachable polling continue
seonghobae
committed
959809a
test(actions): pin current polling detector review boundaries
seonghobae
committed
34bc96c
fix(actions): honor independent polling bounds
seonghobae
committed
27fbf01
test(actions): pin executable poll command semantics
seonghobae
committed
ebc3aaa
fix(actions): require executable historical poll command
seonghobae
committed
125fb94
fix(actions): preserve historical reverse bound capture
seonghobae
committed
1a70e3a
fix(actions): require executable unreachable poll command
seonghobae
committed
c8263ed
fix(actions): tighten generic poll execution and termination
seonghobae
committed
4990691
test(actions): pin post-sleep termination ownership
seonghobae
committed
ca9ebfa
fix(actions): preserve poll termination ownership
seonghobae
committed
2610305
test(actions): treat bare exit as polling termination
seonghobae
committed
cea9ddb
fix(actions): recognize bare exit as finite poll termination
seonghobae
committed
4cce94e
fix(actions): recognize bare exit in transport poll companion
seonghobae
committed
7c81044
test(actions): require historical transport counter data flow
seonghobae
committed
df4ff1c
fix(actions): require historical transport budget data flow
seonghobae
committed
a467678
test(actions): keep historical scope fixtures causal
seonghobae
committed
5d87c36
docs: baseline polling detector commercial gaps
seonghobae
committed
696009f
docs: trace historical polling budget causally
seonghobae
committed
93f953a
test(actions): cover strict bounds and constant timeouts
seonghobae
committed
d50f49c
docs: pin current polling precision RED gaps
seonghobae
committed
b34670b