fix(ci+sarif): eliminate self-hosting false-positive security alerts#15

Merged

tachyon-beep merged 14 commits into

mainfrom

fix/self-hosting-scan-alerts

Jun 1, 2026

Commits on Jun 1, 2026

docs(spec): add panel review §8 pre-implementation blockers

John Morrissey
and
Copilot
committed
docs: design spec for repo standardization to filigree standard

John Morrissey
and
claude
committed
docs(spec): resolve all panel review blockers in wardline-030 spec

John Morrissey
and
Copilot
committed
docs: implementation plan for repo standardization

John Morrissey
and
claude
committed
build: adopt uv (dependency-groups, lockfile, .python-version)

John Morrissey
and
claude
committed
style: apply ruff format across src and tests

John Morrissey
and
claude
committed
build: add Makefile with ci/lint/format/test targets

John Morrissey
and
claude
committed
build: add ruff pre-commit hooks

John Morrissey
and
claude
committed
ci: uv + 3.12/3.13 matrix + 90% coverage floor + format check

John Morrissey
and
claude
committed
ci: build release artifacts with uv build (publish job unchanged)

John Morrissey
and
claude
committed
docs: filigree-class README (features, quick start, agent setup, fit)

John Morrissey
and
claude
committed
docs: expand CONTRIBUTING (uv, conventional commits, PR gate)

John Morrissey
and
claude
committed
docs: add ROADMAP (current state, scope, near-term threads)

John Morrissey
and
claude
committed
fix(ci+sarif): eliminate self-hosting false-positive security alerts

John Morrissey
and
Copilot
committed