Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

hmmhmmhm / ground.codes Public

Notifications You must be signed in to change notification settings
Fork 0
Star 7

Code
Issues 1
Pull requests 13
Discussions
Actions
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Security and quality
Insights

Harden security, operations, and add R2 shadow delivery#68

Merged

hmmhmmhm merged 78 commits into

mainhmmhmmhm/ground.codes:mainfrom

feat/security-operations-data-deliveryhmmhmmhm/ground.codes:feat/security-operations-data-deliveryCopy head branch name to clipboard

Jul 15, 2026

Conversation Commits78 (78)Checks Files changed

Merged

Harden security, operations, and add R2 shadow delivery#68
hmmhmmhm merged 78 commits into
mainfrom
feat/security-operations-data-delivery

Commits

Commits on Jul 13, 2026

docs: design security operations and R2 hardening
hmmhmmhm
committed
docs: plan security operations and R2 delivery
hmmhmmhm
committed
test(security): enforce production audit severity
hmmhmmhm
committed
fix(security): harden production audit runner
hmmhmmhm
committed
fix(security): reject incomplete audit processes
hmmhmmhm
committed
chore(api): upgrade and pin elysia runtime
hmmhmmhm
committed
chore(web): remediate production dependency advisories
hmmhmmhm
committed
fix(web): align swc helper peer
hmmhmmhm
committed
chore(actions): pin automation and add dependabot
hmmhmmhm
committed
fix(actions): cover all workflow pins
hmmhmmhm
committed
fix(actions): scope dependabot groups
hmmhmmhm
committed
feat(security): codify repository governance
hmmhmmhm
committed
ci: enforce production security policy
hmmhmmhm
committed
fix(security): align governance with GitHub API
hmmhmmhm
committed
docs(security): record repository controls
hmmhmmhm
committed
chore(tooling): pin Bun and TypeScript
hmmhmmhm
committed
docs: complete security governance plan
hmmhmmhm
committed
fix(api): initialize metrics clock on first request
hmmhmmhm
committed
feat(api): emit structured completion logs
hmmhmmhm
committed
test(smoke): validate metrics clock and runtime metadata
hmmhmmhm
committed

Commits on Jul 14, 2026

feat(smoke): add quick and full profiles
hmmhmmhm
committed
fix(smoke): preserve failures across notification attempts
hmmhmmhm
committed
docs(operations): define service objectives and runbook
hmmhmmhm
committed
ci(smoke): use profiles and sparse checkout
hmmhmmhm
committed
chore(ci): pin bun and wrangler toolchain
hmmhmmhm
committed
fix(operations): make objectives and rollback verifiable
hmmhmmhm
committed
fix(operations): make status filters executable
hmmhmmhm
committed
fix(api): defer worker app initialization
hmmhmmhm
committed
test(ci): bind workflow toolchain contracts
hmmhmmhm
committed
test(ci): enforce direct bun action inputs
hmmhmmhm
committed
ci(deploy): enforce production concurrency
hmmhmmhm
committed
fix(deploy): wait for active worker commit
hmmhmmhm
committed
test(coverage): define lcov policy enforcement
hmmhmmhm
committed
fix(smoke): retry transient deployment responses
hmmhmmhm
committed
fix(coverage): validate policy targets and paths
hmmhmmhm
committed
fix(coverage): reject malformed and unsafe reports
hmmhmmhm
committed
test(ground-codes): add maintained-source coverage
hmmhmmhm
committed
fix(coverage): validate lcov summary records
hmmhmmhm
committed
fix(coverage): accept summary-only lcov metrics
hmmhmmhm
committed
test(apps): add api and web coverage
hmmhmmhm
committed
test(web): isolate coverage mocks
hmmhmmhm
committed
test(operations): cover automation policy modules
hmmhmmhm
committed
test(coverage): lock measured branch baselines
hmmhmmhm
committed
fix(coverage): harden branch probe portability
hmmhmmhm
committed
fix(coverage): reject malformed branch reports
hmmhmmhm
committed
fix(api): flush completion logs before response
hmmhmmhm
committed
fix(api): preserve metrics wrapper on compile
hmmhmmhm
committed
fix(api): retain completion logs after compile
hmmhmmhm
committed
ci: enforce coverage policy
hmmhmmhm
committed
fix(coverage): secure and serialize report generation
hmmhmmhm
committed
fix(build): pin pages release toolchain
hmmhmmhm
committed
test(build): lock pages toolchain graph
hmmhmmhm
committed
fix(coverage): calibrate api baseline to ci
hmmhmmhm
committed
docs(deploy): record reproducible release commands
hmmhmmhm
committed
fix(docs): make rollback commands fail closed
hmmhmmhm
committed
fix(docs): clarify dry-run auth boundary
hmmhmmhm
committed
fix(docs): preserve incident objective contract
hmmhmmhm
committed
docs: complete metrics and smoke plan
hmmhmmhm
committed
docs: complete ci deployment coverage plan
hmmhmmhm
committed
test(region-data): define immutable manifest contract
hmmhmmhm
committed
fix(region-data): reject linked manifest roots
hmmhmmhm
committed
fix(region-data): harden immutable manifest contract
hmmhmmhm
committed
fix(region-data): stabilize manifest guard failures
hmmhmmhm
committed
fix(region-data): secure directory enumeration
hmmhmmhm
committed
fix(region-data): restore manifest public API
hmmhmmhm
committed
feat(region-data): generate content-addressed releases
hmmhmmhm
committed
test(region-data): enforce single-byte release mutation
hmmhmmhm
committed
fix(region-data): seal release generation against races
hmmhmmhm
committed
fix(region-data): make release activation durable
hmmhmmhm
committed
fix(region-data): seal pointer activation transaction
hmmhmmhm
committed
feat(region-data): add verified r2 synchronizer
hmmhmmhm
committed
feat(region-data): publish immutable r2 releases
hmmhmmhm
committed

Commits on Jul 15, 2026

test(region-data): verify complete release materialization
hmmhmmhm
committed
docs(region-data): document r2 delivery operations
hmmhmmhm
committed
feat(region-data): publish initial r2 release
hmmhmmhm
committed
ci(region-data): shadow materialize from r2
hmmhmmhm
committed
fix(ci): restore production audit endpoint
hmmhmmhm
committed
fix(ci): approve standalone native build
hmmhmmhm
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.