jakman85andClaude Opus 5 dc2d1ce17e fix(conformance): the R-NET-04 scan descended into nested agent worktrees ...

TRACKED_YAML rglob'd from the repo root excluding only .git and _artifacts, so it
also walked .claude/worktrees/agent-*/ — the isolated worktrees created for agent
runs. The check counted 5 CiliumEgressGatewayPolicy objects where exactly 1 is
authored, failing R-NET-04 for a reason unrelated to egress steering. Now skips
dot-DIRECTORIES (covering .git, .claude, .cache) while still matching dot-FILES
such as .sops.yaml. .claude/ is gitignored, so nothing beneath it is authored
surface.

Co-Authored-By: Claude Opus 5 <[email protected]>

2026-09-07 01:01:53 -05:00

..

auditability-proofs-producible

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

dev-nodes-provisioned-as-code

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

egress-paths-selected-by-rules

fix(conformance): the R-NET-04 scan descended into nested agent worktrees

2026-09-07 01:01:53 -05:00

flux-postbuild-substitution

feat(ci): substitution-safety gate + escape 6 comment hazards; strict mode is now SAFE

2026-09-01 01:31:07 -05:00

ha-control-plane-as-code

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

keycloak-client-secret-reconciler

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

least-privilege-rbac

fix(ci): kill the false-green base resolution; cover R-SEC-01/02 + R-TEST-06 (L0)

2026-08-31 23:26:49 -05:00

no-plaintext-secrets

fix(ci): kill the false-green base resolution; cover R-SEC-01/02 + R-TEST-06 (L0)

2026-08-31 23:26:49 -05:00

placeholder-guard-coupling

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

prod-baremetal-not-dev-surface

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

spec-immutability-enforced

fix(ci): kill the false-green base resolution; cover R-SEC-01/02 + R-TEST-06 (L0)

2026-08-31 23:26:49 -05:00

tls-lifecycle-automated

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00