Merge branch 'next' into fix/2116-surface-bare-require

This commit is contained in:
Tom Boucher
2026-07-12 10:33:02 -04:00
committed by GitHub
76 changed files with 379 additions and 299 deletions

View File

@@ -0,0 +1,5 @@
---
type: Fixed
pr: 2211
---
**Dead security scan exports removed; injection-scan docs corrected to match reality** — `scanEntropyAnomalies` and `shannonEntropy` were dead code with zero production callers (live hooks inline their own patterns for independence). REQ-SCAN-INJ-02/-03 now accurately describe what runs live (injection patterns, invisible Unicode) vs CI-only (base64-decode, codebase scan). (#2198)

View File

@@ -0,0 +1,5 @@
---
type: Fixed
pr: 2209
---
**Milestone audit no longer flags a not-yet-validated phase as a Nyquist failure** — a phase that was planned but never run through `validate-phase` now reports as NOT-VALIDATED (a "run validate-phase" TODO) instead of collapsing into PARTIAL alongside phases whose validation genuinely failed. (#2117)