Skip to content

feat: codebase hardening from python-project-workflow patterns (P7) - #27

Merged
CodeSigils merged 1 commit into
mainfrom
feat/p7-codebase-hardening
Aug 21, 2026
Merged

feat: codebase hardening from python-project-workflow patterns (P7)#27
CodeSigils merged 1 commit into
mainfrom
feat/p7-codebase-hardening

Conversation

@CodeSigils

Copy link
Copy Markdown
Owner

Summary

Borrow 7 patterns from python-project-workflow plus 1 new stale-drift detection check. All changes are additive — no existing behavior modified.

Changes

Item File Description
P7.1 — safe file reading with symlink rejection
P7.2 — standardized error output
P7.3 — whitespace-normalized matching
P7.4 Unsafe probe detection in — flags dangerous git operations
P7.5 Reference file size budgets (50B–50KB)
P7.6 .agents/skills/skill-discovery
.github/ISSUE_TEMPLATE/bug_report.yml
.github/ISSUE_TEMPLATE/config.yml
.github/ISSUE_TEMPLATE/feature_request.yml
.github/dependabot.yml
.github/scripts/_expiry.py
.github/scripts/_manifest.py
.github/scripts/_url_contract.py
.github/scripts/ci-check.py
.github/scripts/test_integration.py
.github/scripts/test_validators.py
.github/scripts/validate-docs.py
.github/scripts/verify-marketplace-urls.py
.github/workflows/ci.yml
.github/workflows/dependabot-auto-merge.yml
.github/workflows/release.yml
.gitignore
CITATION.cff
CONTRIBUTING.md
LICENSE
README.md
SECURITY.md
docs/evidence-urls.json
docs/hub-marketplace-research.md
docs/reference-style-links-as-anti-drift.md
proposals/ROADMAP.md
pyproject.toml
scripts/_common.py
scripts/check-expiry.py
scripts/check-readme-tree.py
scripts/check-version-consistency.py
scripts/cron-health.py
scripts/test_validate_skill.py
scripts/validate-ci.py
scripts/validate-evaluation-fixtures.py
scripts/validate-skill.py
skills/skill-discovery/SKILL.md
skills/skill-discovery/references/catalog-contracts.md
skills/skill-discovery/references/examples.md
skills/skill-discovery/references/platform-locations.md
skills/skill-discovery/references/skill-format.md
skills/skill-discovery/references/trust-review.md
tests/discovery-evaluations.json
uv.lock for accurate tracked-file listing
P7.7 regression mode (5 tests)
P7.8 Reverse drift check — unlisted files detection

Verification

  • All 8 validation scripts pass
  • All 35 tests pass (25 unit + 2 integration + 8 skill validation)
  • : 5/5 regression tests pass
  • : 3/3 checks OK

- Add read_text_checked(), fail(), contains_markdown_phrase() to _common.py
- Add unsafe probe detection and reference size budgets to validate_skill()
- Add reverse tree drift detection and git ls-files to check-readme-tree.py
- Add --self-test regression mode to validate-ci.py (5 tests)
- Update ROADMAP.md with P7 section documenting all improvements
@CodeSigils
CodeSigils merged commit c9cefff into main Aug 21, 2026
7 checks passed
@CodeSigils
CodeSigils deleted the feat/p7-codebase-hardening branch August 21, 2026 15:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant