feat: add secure Covencat autoreview and repair loop - #12

Merged

CompleteDotTech merged 19 commits into

mainfrom

agent/covencat-autorepair

Jul 15, 2026

Commits on Jul 14, 2026

feat: add secure Covencat autoreview repair loop
CompleteDotTech
committed
d1bfb9b
build: add immutable sandboxed worker image
CompleteDotTech
committed
9ade8a1
chore: verify production worker boundaries
CompleteDotTech
committed
089cb9f
feat: add protected OAuth refresh and ingress relay
CompleteDotTech
committed
0b4ef2a
fix: mount ephemeral Codex OAuth credential
CompleteDotTech
committed
7667841
fix: review trusted failures before repair
CompleteDotTech
committed
b4a710e
fix: derive findings from mapped trusted failures
CompleteDotTech
committed
5a1f178
fix: isolate hosted mode CLI flags
CompleteDotTech
committed
33e9538
fix: prefer trusted execution receipts
CompleteDotTech
committed
e22c7c7
fix(security): redact command artifact arguments
CompleteDotTech
committed
559dc0f
fix(review): embed trusted receipt evidence
CompleteDotTech
committed
2367832

Commits on Jul 15, 2026

fix(review): require relevant support evidence
CompleteDotTech
committed
50063d4
fix(repair): verify pushed revision safely
CompleteDotTech
committed
6dd3c68
fix(review): classify bounded scope correctly
CompleteDotTech
committed
e205f25
Capture complete local PR diff evidence
CompleteDotTech
committed
3a5f83f
Retain full local review patches
CompleteDotTech
committed
bb3091e
Capture PR diffs from the merge base
CompleteDotTech
committed
ad4247b
Ignore non-material bounded-scope notes
CompleteDotTech
committed
aa73327
Match only real binary diff markers
CompleteDotTech
committed
8d90910