golem15/msd-core
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor: hard-fork GSD -> MSD (Make Software Done)

Browse Source 
Mechanical rename produced by scripts/msd-rename.cjs: gsd/Gsd/GSD -> msd/Msd/MSD
across contents and paths, upstream package/repo coordinates -> @golem15/msd-core
and golem15com/msd-core. Deep links into upstream history, sibling upstream
packages, the GSD-2 import feature, CHANGELOG.md and .changeset/ are kept as-is.

Hand edits on top: MSD block-letter banner and logos, LICENSE copyright line,
package/plugin identity, regenerated lockfile, install-tree fixtures, derived
registries and benchmark baseline; migration checksum baseline re-locked
(MSD keeps its own install state, so no install had applied the old sums);
sort-order and regex-escaped expectations in tests adjusted.
This commit is contained in:
Jakub Zych
2026-10-06 01:47:40 +02:00
parent fe069b2a56
commit a9a7a328e6
2763 changed files with 78465 additions and 78434 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
docs/security/baseline.md
View File

@@ -12,7 +12,7 @@
### Repos in scope
All active, non-archived repositories under the `open-gsd` GitHub organization,
beginning with the pilot repo `open-gsd/gsd-core`.
beginning with the pilot repo `golem15com/msd-core`.
### Out of scope
@@ -26,7 +26,7 @@ beginning with the pilot repo `open-gsd/gsd-core`.
This section defines the mandatory security controls for every in-scope repo.
Each control links to the PR that implements it in the pilot repo
(`open-gsd/gsd-core`). Sibling repos adopt the same controls during
(`golem15com/msd-core`). Sibling repos adopt the same controls during
Phase 2 rollout (§ 6).
### 2.1 Dependency integrity
@@ -136,7 +136,7 @@ file before the job passes.
**Control:** Text output and user-facing strings are scanned for invisible
Unicode and bidirectional override characters that could be used to obscure
malicious content in diffs or logs. The live hooks
(`gsd-prompt-guard.js`, `gsd-read-injection-scanner.js`) inline their own
(`msd-prompt-guard.js`, `msd-read-injection-scanner.js`) inline their own
Unicode-detection patterns for hook independence — they do not call
`scanForInjection` from `security.cts`. The centralized `scanForInjection`
function serves as the CI codebase-scanner engine
@@ -299,7 +299,7 @@ If private advisory filing is unavailable, contact the open-gsd maintainers and
```text
Title: [Short description, e.g., "Secret exposed in CI log for PR #NNN"]
Affected repo: open-gsd/gsd-core (or sibling repo name)
Affected repo: golem15com/msd-core (or sibling repo name)
Affected ver: [npm version range, e.g., "<=1.42.3" or "all versions"]
Reporter: [Your name / handle, or "Anonymous"]
Date found: YYYY-MM-DD
@@ -388,7 +388,7 @@ Responsibilities:
| Step | Detail |
|---|---|
| 1 | Requester opens a GitHub issue in `open-gsd/gsd-core` tagged `security-exception` |
| 1 | Requester opens a GitHub issue in `golem15com/msd-core` tagged `security-exception` |
| 2 | Issue describes: which control, why the exception is needed, proposed compensating control |
| 3 | One maintainer approves the exception in the issue thread |
| 4 | Exception is time-limited: maximum 90 days. Requester must file a renewal or close the issue. |
@@ -398,7 +398,7 @@ Responsibilities:
## 6. Rollout plan
### Phase 1 — Pilot: `open-gsd/gsd-core` (in progress)
### Phase 1 — Pilot: `golem15com/msd-core` (in progress)
| Item | Status | Owner | Target date | Exit criteria |
|---|---|---|---|---|