feat(cli): review and apply saved SECURITY.md drafts - #489

Open

mldangelo-oai wants to merge 50 commits into

mdangelo/codex/security-policy-draftsfrom

mdangelo/codex/security-policy-command

Commits on Aug 16, 2026

Preserve source-backed threat models across scan workflows
mldangelo-oai
committed
0691542
Keep architecture mapping separate from audit coverage
mldangelo-oai
committed
997b2f3
Carry saved threat models through Workbench diff completion
mldangelo-oai
committed
8591310
Keep generated resource evidence safe and source-aware
mldangelo-oai
committed
ea48c54
Keep scan-specific threat models out of the shared cache
mldangelo-oai
committed
10c7252
Preserve per-scan model bodies without cache metadata
mldangelo-oai
committed
50d7914

Commits on Aug 17, 2026

feat(cli): generate and review SECURITY.md
mldangelo-oai
committed
39fd860
fix(cli): keep policy generation scoped and reviewable
mldangelo-oai
committed
0074827
fix(cli): preserve policy evidence during generation
mldangelo-oai
committed
f27e4cd
fix(cli): preserve policy updates and cancellation
mldangelo-oai
committed
be2fb8f
fix(cli): retain previous policy files after updates
mldangelo-oai
committed
78c9325
fix(cli): bind policy drafts to their source guidance
mldangelo-oai
committed
82c1cbe
fix(cli): handle linked policies during preflight
mldangelo-oai
committed
1f36f9d
fix(cli): honor policy output options
mldangelo-oai
committed
2fd78b1
fix(cli): report policy failures in full output
mldangelo-oai
committed
53553bd
fix(cli): preserve policy scope and user choices
mldangelo-oai
committed
233d2d5
fix(cli): distinguish command names from option values
mldangelo-oai
committed
b1de4d9
fix(ci): make policy checks portable
mldangelo-oai
committed
7f9b827
fix(cli): keep component policy changes in scope
mldangelo-oai
committed
7c5b18d
fix(cli): preserve the selected policy scope
mldangelo-oai
committed
b1233a9
fix(cli): protect reporting policies and clarify output errors
mldangelo-oai
committed
63e50f8
fix(cli): validate the complete policy checkout
mldangelo-oai
committed
3ecd6c0
fix(cli): keep policy targets in Git worktrees
mldangelo-oai
committed
2f89060
fix(cli): protect enclosing policy checkouts
mldangelo-oai
committed
fe4d54d
fix(cli): keep policy Python lookup scoped
mldangelo-oai
committed
584d9df
fix(cli): normalize reporting policy directory casing
mldangelo-oai
committed
5c0acd8
refactor(cli): simplify policy setup and validation
mldangelo-oai
committed
f960069
Merge remote-tracking branch 'origin/main' into mdangelo/codex/security-policy-stack-cleanup
mldangelo-oai
committed
53878f3
refactor(cli): check policy write scope when applying
mldangelo-oai
committed
2294046
merge: record extracted policy draft base
mldangelo-oai
committed
10d2f06
refactor(cli): separate policy drafting from application
mldangelo-oai
committed
b129153
Merge commit '60acf79eccc08e94d31b14837e76f665a1c85cb6' into mdangelo/codex/security-policy-stack-cleanup
mldangelo-oai
committed
5370aa5
fix(cli): preserve policy scope and retry verification
mldangelo-oai
committed
1875401
merge: carry policy preview fixes into application
mldangelo-oai
committed
ed9bf1b
fix(cli): bind policy application to validated inputs
mldangelo-oai
committed
f95270c
merge: carry policy input and output fixes into application
mldangelo-oai
committed
4174bb9
merge: update policy application to the corrected draft layer
mldangelo-oai
committed
ab36a6a
fix(cli): preserve policy boundaries on alias and copy failures
mldangelo-oai
committed
fc6f0a2
Merge policy draft path checks
mldangelo-oai
committed
c0c1b96
Merge current main and shared command helpers
mldangelo-oai
committed
ff9b205
fix(cli): support policy writes without Windows hard links
mldangelo-oai
committed
b3bbf46
Merge policy input validation fixes
mldangelo-oai
committed
c4d0e42
Merge read-only drafting cleanup
mldangelo-oai
committed
9b598f5

Commits on Aug 18, 2026