#88 docs(upstream): sync round 6 — advance baseline to 1e8c7e7 (2026-05-26)

Summary

Sixth upstream sync round. Advances the recorded baseline from 3b7e0ba3 (2026-05-18) to 1e8c7e7 (2026-05-20 UTC, evaluated 2026-05-26), closing tracker issue #87 on the next upstream-drift.yml tick. 102 commits triaged; per-commit dispositions land in upstream/sync-rounds/2026-05-26.md.

Headlines:

• Two EGC-authored PRs landed upstream during this window, both ECC-only surface (not back-portable):
  • ECC PR #1982 — Unicode Tag block (U+E0000–U+E007F) + six other invisible code points added to check-unicode-safety.js denylist. Canonical "ASCII smuggling" / "Tag Smuggling" LLM prompt-injection vector. Validator does not exist in EGC's port surface.
  • ECC PR #1983 — writeBridgeAtomic / writeWarnState ENOENT race + Windows EPERM/EACCES/EBUSY rename retry. Touches the ecc-metrics-bridge / ecc-context-monitor cost-observability surface, which is not part of EGC.
• 78 of 102 commits are ECC release-readiness / billing-readback / dashboard refresh / video-suite operations log (May 18–20 RC1 publication cycle, ECC 2.0 hypergrowth lane) with no EGC analogue — clean skip.
• 9 out-of-surface fixes skip cleanly: claude-project install-target trio, Python LLM providers (OpenAI/AstraFlow empty-choices guard), MCP health-check 406 handling, gateguard-fact-force quoting, IOC deny-rule filter, resolve-ecc-root.js plugin bootstrap.
• Three substantial net-new items deferred to focused follow-up PRs:
  • Blender motion-state inspection skill (community contribution)
  • Harness-audit integration scoring extension (ECC PR #1990, +214 LOC in script / +192 LOC in tests / .md→.toml command translation needed)
  • continuous-learning-v2 project-registry maintenance (757-line change; EGC missing detect-project.sh)
• One trivial clean-delete portable candidate (812d4d0 — delete skills/strategic-compact/suggest-compact.sh, unreferenced in EGC's runtime path) filed for a small follow-up PR rather than bundled here, so a regression there does not block the baseline cycle.

No new EGC→ECC PR opens this round — the two high-value targets are already merged into ECC main, and the remaining commits are out-of-surface or substantial enough to need focused PRs.

Files changed

• upstream/.upstream-sync.json — lastSyncedSha / lastSyncedAt / notes advanced to round 6.
• upstream/README.md — Baseline badge, last-synced commit link, last-synced date, round-notes pointer list extended.
• upstream/ko-KR/README.md, upstream/zh-CN/README.md — catch-up update: localised mirrors had been left on the round-3 baseline 393d397e (2026-05-13); both now point at the round-6 SHA and list the full pointer chain (5 rounds).
• upstream/sync-rounds/2026-05-26.md — new round-6 inventory.

Test plan

• npm run lint — clean
• npm test — 308/308 pass (includes ci/validate-upstream-sync.test.js 9/9, all 5 fixture tests)
• node scripts/ci/validate-upstream-sync.js — both files reference 1e8c7e7
• Compare endpoint 3b7e0ba..1e8c7e7 returns ahead_by: 102 (matches tracker issue #87)
• Baseline badge URL renders against shields.io
• Round-notes pointer paths all resolve from upstream/README.md and from both localised READMEs

Related

• Closes #87 (Upstream Sync tracker — 102 commits ahead since 3b7e0ba)
• Prior round: #86 (Round 5, baseline 3b7e0ba3)

---

Summary by cubic

Advance the upstream baseline and publish round‑6 notes to keep EGC in sync with ECC. Tidy the round‑6 notes (rename the “Detailed dispositions” section and correct the footer date to 2026‑05‑20), update upstream/.upstream-sync.json and localized READMEs (ko‑KR, zh‑CN), and add upstream/sync-rounds/2026-05-26.md; no runtime changes; closes #87.

Summary by CodeRabbit

• Documentation

  • Updated upstream synchronization docs across languages (en, ko-KR, zh-CN) and added the 2026-05-26 sync round report detailing drift, dispositions, and follow-up items.

• Chores

  • Advanced upstream synchronization to round six and updated baseline tracking metadata and round notes to reflect the latest sync.