Conversation
ThreatCrush Security Scan4586 finding(s) HIGH/CRITICAL: 43 | MEDIUM: 4032 | LOW: 511
…and 4536 more. Full results in the Security tab. Snippets are redacted; ThreatCrush never prints matched credential material. |
| FNXC:TriagePlanningRecovery 2026-09-19-04:04: | ||
| The sweep announced "Recovering specified triage task <id>" on every poll for cards it never | ||
| recovered, and recorded no outcome when the recovery declined or when its own gates skipped the | ||
| candidate. The recorded engine log held 180 announcements and zero reasons, so an operator could |
| paused: false, | ||
| steps: [{ title: "Implement", status: "pending" }], | ||
| workflowStepResults: [ | ||
| { workflowStepId: "plan-review", workflowStepName: "Plan Review", phase: "pre-merge", status: "passed", verdict: "APPROVE" }, |
…ead-only) FNXC:VerifyPerf 2026-09-24-01:00: MOVED from #17 (board-reliability) to #11 (verify-perf theme, per review). The typecheck step keeps the incremental tsbuildinfo cache (warm runs recheck only changed files) while staying READ-ONLY (--noEmit: no dist emit, no partial dist on a killed typecheck). Symptom Verification: warm verify typecheck rechecks only changed files; the step emits nothing (read-only).
e6c0b48 to
6f75d66
Compare
9f58a8b to
a14c77b
Compare
78daa29 to
321491d
Compare
|
Review notes for the audited SHA The current diff changes ten TypeScript configs to disable source/declaration maps; it does not contain the stranded-source, planning-spin, graph-identity, or watchdog fixes promised by the title. Please retitle and scope this as a build-output change, or close/supersede it with the actual behavior fixes in their respective PRs. Six of the config edits appear redundant because those packages inherit the changed plugin base config. Before landing the map change, please show a measured build/package benefit and verify that published diagnostics/artifacts do not depend on those maps. The package-files test and upstream config expect map globs, but that alone does not prove this change breaks packaging; the issue is that the PR currently provides neither the advertised reliability work nor evidence for removing the maps. |
Supersedes the closed #10 (cannot reopen). See the commit for Root Cause + Symptom Verification.