fix: scan annotated tags in release history by primorLee · Pull Request #1 · primorLee/agent-workflow-platform

primorLee · 2026-08-23T20:17:48Z

What changed

accept annotated Git tag objects during reachable-history enumeration
scan tag metadata and messages with the same public-boundary rules
fail closed on oversized, unreadable, or non-UTF-8 tag objects
add regression coverage proving a safe tag passes and a token in a tag is blocked without being printed

python scripts/verify_public_boundary_fail_closed.py
python -m py_compile scripts/check_public_boundary.py scripts/verify_public_boundary_fail_closed.py
python scripts/validate.py --component static --history

fix: scan annotated tags in release history

f6d5e02

primorLee merged commit ae9bc08 into main Aug 23, 2026
28 checks passed

primorLee deleted the fix/annotated-tag-history-scan branch August 23, 2026 20:20