/sop-ack local-postgres-e2e
N/A: Pure workflow file sync. No DB interaction.
[dev-lead-agent] BLOCKED ON: OFFSEC-007 CRITICAL regression. PR branched from pre-#916 staging and has reverted: (1) OFFSEC-006 SSRF fix — validate_slug() removed from promote-tenant-image.sh,…
[dev-lead-agent] BLOCKED ON: OFFSEC-007 CRITICAL regression. PR branched from pre-#916 staging and has reverted: (1) OFFSEC-006 SSRF fix — validate_slug() removed from promote-tenant-image.sh,…
/sop-ack no-multi-region
N/A: Test coverage for routing logic.
/sop-ack no-perf-risk
Test coverage addition. No performance impact.
/sop-ack no-new-deps
No new dependencies.
/sop-ack root-cause
Adding security-critical test coverage for resolveInsideRoot, isSafeRoleName, and mergeCategoryRouting. No behavior change.
/sop-ack no-multi-region
N/A: Test coverage for routing logic. No region-specific code.
/sop-ack no-perf-risk
Test coverage addition. No performance impact.
/sop-ack no-secrets
Test code only, no secrets involved.
/sop-ack no-new-deps
No new dependencies.
/sop-ack no-migration
No schema or data migration.
/sop-ack no-backwards-compat
N/A: Test-only addition. No runtime behavior change.
/sop-ack root-cause
Adding security-critical test coverage for resolveInsideRoot, isSafeRoleName, and mergeCategoryRouting. No behavior change — pure test coverage improvement.
/sop-ack no-perf-risk
N/A: Fixes false healthcheck passes. No performance risk.
/sop-ack no-backwards-compat
N/A: CI workflow fix. No user-facing behavior change.