Skip to content

test: detect source violation under weakened PR policy - #11

Closed
vladzdev wants to merge 1 commit into
codapult-guard/base-policy-rulefrom
codapult-guard/policy-and-source-weakening
Closed

vladzdev wants to merge 1 commit into
codapult-guard/base-policy-rulefrom
codapult-guard/policy-and-source-weakening

Conversation

@vladzdev

@vladzdev vladzdev commented Nov 1, 2026

Copy link
Copy Markdown
Member

Hosted adversarial test for Guard 0.12.0. The target branch contains an active rule forbidding node:child_process in packages/write/src/index.ts. This PR removes that rule and adds the forbidden import in the same diff. Expected: Guard reads the base branch policy, finds the source violation, fails the architecture gate, marks the policy change for host review, and emits no in-toto statement.

@vladzdev

vladzdev commented Nov 1, 2026

Copy link
Copy Markdown
Member Author

Hosted validation for @codapult/guard@0.12.0 is complete. Closing this temporary test PR without merging.

@vladzdev vladzdev closed this Nov 1, 2026
@vladzdev
vladzdev deleted the codapult-guard/policy-and-source-weakening branch November 1, 2026 09:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant