adlee-was-taken aace6f132a harden(server): explicit verify-commit success gate + non-member/genesis hook tests ...

- verify_org_signer now rejects on a non-zero git verify-commit exit instead of
  relying on the stderr fingerprint regex alone (PM hardening note 1).
- org_hook_signed: add commit_signed_by_non_member_is_rejected (exercises the
  signature rejection path) and genesis_bootstrap_with_sole_owner_is_accepted.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-20 12:36:04 -04:00

..

org_hook_signed.rs

harden(server): explicit verify-commit success gate + non-member/genesis hook tests

2026-06-20 12:36:04 -04:00

org_hook.rs

refactor(server): fold in PM review notes on classify_path

2026-06-20 00:04:39 -04:00

verify_commit.rs

fix(server): real signature verification in pre-receive hook (audit S1)

2026-05-02 16:34:37 -04:00