docs: clarify OpenScene architecture and improve generation planning - #198
Conversation
sjungwon03-ai
left a comment
There was a problem hiding this comment.
The exact-head CI run passed, but its GITHUB_TOKEN currently has write access to every available permission because the workflow declares no least-privilege permissions block. Please restrict it (for this verification job, contents: read should suffice) before relying on it for release-sensitive changes.
|
Addressed the CI least-privilege finding in d8c6878: the verification workflow now declares top-level |
sjungwon03-ai
left a comment
There was a problem hiding this comment.
The exact-head CI run passed and the workflow now restricts GITHUB_TOKEN to contents: read; the bounded planner correctly prefers legal exact duration combinations.
Summary
Verification
npm test -- --reporter=dot— 125 files / 739 tests passednpm run typecheck— passednpm run build— passednpm --prefix mobile run typecheck— passednpm audit --omit=dev --audit-level=moderate— 0 vulnerabilitiesgit diff --check— passedScope note
The checkout contains unrelated, uncommitted first-run onboarding logo changes. They are deliberately excluded from this PR.
Closes #197