[Process] Обновлять commits proof после изменения PR title #30

Closed
opened 2026-10-11 21:54:09 +03:00 by codex-bot · 0 comments
Owner

Problem

Отдельный commits workflow слушает opened/synchronize/reopened, не edited. Green Conventional Commit proof может относиться к старому title.

Expected Behavior

Title-only rename даёт свежий commits outcome без новых unrelated content/security checks.

Evidence

Audit date 2026-10-11; 11, VERIFY-002 (specs). Revision fcdc805f6c1b3be6a20a7e858e3e80cbd83a9121; Confidence High; Verification status static/server behavior unverified.
Affected: .gitea/workflows/commits.yml:3–30. Gitea 1.27.3, root edited precedent.

Scope

In scope

Existing standalone commits edited trigger и required context.

Out of scope

New workflow/check status, native OpenSpec lifecycle change, application tests.

Proposed Approach

Добавить supported event в current commits owner; content verify/security remain separate.

Acceptance Criteria

  • Invalid title-only rename fails fresh commits; valid title passes same HEAD.
  • Unrelated verify/security не rerun только из-за title; required commits name unchanged.

Verification

Disposable PR rename/read-back и YAML review; git diff --check. No application full verify.

Dependencies

Нет; specs content-range issue #2 независим.

Traceability

Campaign WealthLedger/main#23 . Finding VERIFY-002. WealthLedger/specs; T34 specs.

<!-- wealthledger-audit:2026-10-11:pr-title-edited-specs --> ## Problem Отдельный commits workflow слушает opened/synchronize/reopened, не edited. Green Conventional Commit proof может относиться к старому title. ## Expected Behavior Title-only rename даёт свежий commits outcome без новых unrelated content/security checks. ## Evidence Audit date `2026-10-11`; [11](https://git.personal.ksv741.ru/WealthLedger/main/src/commit/d07fbfabb1295780952a554185989d2d5b5c8349/audits/2026-10-11/reports/11-validation-and-ci-cd-efficiency-report.md), VERIFY-002 (specs). Revision `fcdc805f6c1b3be6a20a7e858e3e80cbd83a9121`; Confidence High; Verification status static/server behavior unverified. Affected: [.gitea/workflows/commits.yml:3–30](https://git.personal.ksv741.ru/WealthLedger/specs/src/commit/fcdc805f6c1b3be6a20a7e858e3e80cbd83a9121/.gitea/workflows/commits.yml#L3-L30). Gitea 1.27.3, root edited precedent. ## Scope ### In scope Existing standalone commits edited trigger и required context. ### Out of scope New workflow/check status, native OpenSpec lifecycle change, application tests. ## Proposed Approach Добавить supported event в current commits owner; content verify/security remain separate. ## Acceptance Criteria - [ ] Invalid title-only rename fails fresh commits; valid title passes same HEAD. - [ ] Unrelated verify/security не rerun только из-за title; required commits name unchanged. ## Verification Disposable PR rename/read-back и YAML review; git diff --check. No application full verify. ## Dependencies Нет; specs content-range issue #2 независим. ## Traceability Campaign https://git.personal.ksv741.ru/WealthLedger/main/issues/23 . Finding VERIFY-002. WealthLedger/specs; T34 specs.
codex-bot added this to the Technical Audit Remediation — 2026-10-11 milestone 2026-10-11 21:54:09 +03:00
codex-bot added the Kind/Enhancement
Priority
Low
4
audit/2026-10-11
labels 2026-10-11 21:54:09 +03:00
codex-bot was assigned by hermes-agent 2026-10-12 00:04:14 +03:00
hermes-agent added this to the WealthLedger — Delivery Board project 2026-10-12 00:04:14 +03:00
hermes-agent added Kind/Process and removed Kind/Enhancement labels 2026-10-12 00:04:15 +03:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: WealthLedger/specs#30