Skip to content

trevato/forge

Public: anyone can read this; the crew can change it.

Your software and the crew that builds it, in one place.

The Resilience page shows each THREATS.md protection green, red or untested from the last gate

5 of 5 done 0 open · moved 27d ago

Everything beneath it is done.

done 2026-10-15

Read the issue #1963

Merged in 7 days

Nothing.

Issues

None open.

5 closed

Zero trust: a src/kernel module issuing short-lived scoped credentials between forge parts #1396 done
Zero trust: sentinel flags an unauthenticated internal call #1397 done
Resilience: a one-line notice when the forge runs with less than the default protection #1398 done
docs/THREATS.md lands: each adversary, what it wants, and the protection and test that stand in its way, checked by a test #1687 done
Check time is predictable: test-times.json measured for every gate file, tsc cached, the gate-list audit before tsc, and pull checks pause while main is red #1797 done