Close 28 tracker items already delivered on main
Merged
UN
13h ago+348+348+012345678901234567890123456789-82-82-01234567890123456789
Reconcile audited tracker entries whose source delivery is already present on main. Reverified main: eebda9277e52f636e17824c65d2bfd933ec6c458 (unchanged from the audit). This changes tracker records, append-only item history and the generated changelog. REAL items remain untouched.
Each eligible entry was claimed, annotated with current delivery evidence, then closed or canceled. Duplicates gain a related link to the canonical item. No implementation changed; behavioral revert proof does not apply.
| Item | Verdict | Reverified evidence | Item link |
|---|---|---|---|
pm-github-5igz | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #57 adds the canonical attestation consumer and package-runner publish regression corpus. Retained evidence: scripts/main-invocation.ts, scripts/verify-release-publish-attestation.ts, test/verify-release-publish-attestation.test.ts. | tracker item |
pm-github-ypi5 | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #57 adopts complete changelog reads; current package.json passes unbounded output-budget/output-limit arguments to the changelog host. Retained evidence: scripts/main-invocation.ts, scripts/verify-release-publish-attestation.ts, test/verify-release-publish-attestation.test.ts. | tracker item |
pm-github-yq1d | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): Current .github/workflows/release.yml uses main-ref-restricted OIDC and a pre-bump identity preflight; test/release-workflow.test.ts contains the release-order/credential guards. This historical ordering defect is distinct from later prepared-release recovery gaps. Retained evidence: .github/workflows/release.yml, test/release-workflow.test.ts. | tracker item |
pm-github-m8u2 | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): Current .github/workflows/release.yml uses OIDC trusted publishing and upgrades npm before publication; the stored-secret publish path was replaced. Release-workflow regression tests remain on main. Retained evidence: .github/workflows/release.yml, test/release-workflow.test.ts. | tracker item |
pm-github-lfcf | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #158 (f00e299) fixes release placement in closeout-generated changelogs and includes a regression preserving historical sections. Retained evidence: gate.ts, import-fidelity.ts, index.ts. | tracker item |
pm-github-uqjf | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #150 adds explicit declarations; PR #159 (4ff22de) corrects attribution to the PR that actually delivered the item. Delivery-declaration tests cover the pm-ado #16/#19 case. Retained evidence: closeout.ts, test/closeout-attribution.test.ts, test/closeout.test.ts. | tracker item |
pm-github-l1ot | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PRs #149/#152 share package-owned changelog generation/status filters with release:check and deterministically refresh/select existing release PRs. Retained evidence: scripts/daily-release-plan.ts, test/daily-release-plan.test.ts, test/release-approval.test.ts. | tracker item |
pm-github-b145 | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #148 (dc86e83) refreshes approval/run state in timeout diagnostics and distinguishes unavailable run reads. Retained evidence: closeout.ts, import-fidelity.ts, test/closeout.test.ts. | tracker item |
pm-github-b143 | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #148 (dc86e83) preserves authoritative legacy GitHub ownership across copied provider examples. Retained evidence: closeout.ts, import-fidelity.ts, test/closeout.test.ts. | tracker item |
pm-github-b141 | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #148 (dc86e83) rejects malformed effective-rule discriminators before any closeout write. Retained evidence: closeout.ts, import-fidelity.ts, test/closeout.test.ts. | tracker item |
pm-github-8r7c | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #146 (a6eb158) refreshes automated proposal branches and dispatches eligible caller checks. Retained evidence: test/bot-pr-workflow.test.ts, test/closeout-workflow.test.ts, test/import-gate.test.ts. | tracker item |
pm-github-aiok | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): Published caller templates no longer contain placeholders, and the canonical pm-graph/pm-jira/pm-todos checkouts now have SHA-pinned gated callers. The adoption request is delivered, though the old pinned workflows can fail later. Retained evidence: docs/sync-workflow-caller.yml. | tracker item |
pm-github-7c95 | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #147 (ec21772) keeps reusable workflow operands in safe argument positions for canonical attestation scanning. Retained evidence: test/attestation-workflow-operands.test.ts, test/import-gate.test.ts, test/prepare-merge-driver.test.ts. | tracker item |
pm-github-aplb | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #134 (aa96490) retries synthetic fixture removal to tolerate detached flush completion; test/closeout-workflow.test.ts retains the regression. Retained evidence: test/closeout-workflow.test.ts, test/import-gate.test.ts. | tracker item |
pm-github-m8vj | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): package.json changelog commands pass --date-from-version; .github/workflows/release.yml retains the deterministic date flag. The version-date verifier is wired through release:check. Retained evidence: package.json, .github/workflows/release.yml. | tracker item |
pm-github-zqad | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #52 and merge-evidence PR #53 deliver all-object identity/privacy auditing; current privacy gate sources and regression tests are present. Retained evidence: scripts/privacy-gate.ts, test/privacy-gate.test.ts. | tracker item |
pm-github-xhtp | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #162 (eebda92) distinguishes bare-root regex literals and returns redacted privacy-match diagnostics. Retained evidence: gate.ts, test/coverage-edges.test.ts, test/gate-inputs.test.ts. | tracker item |
pm-github-sah1 | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #158 (f00e299) stabilizes watchdog readiness; retained behavioral controls still detect missing forced termination. Retained evidence: gate.ts, import-fidelity.ts, index.ts. | tracker item |
pm-github-n0mm | DUPLICATE | Reverified main eebda9277e52 (unchanged since audit): Canonical id: pmc-txk1 in pm-changelog, delivered by PR #262 (b3af5d5). This is a consumer observation of the same closed-incident classifier defect; adoption of that release is separate. Retained evidence: docs/changelog-release-placement.md. | tracker item |
pm-github-ullj | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #154 (c651421) adds already-linked-only refresh, batch fetches and audited update-only mutations. Retained evidence: import-fidelity.ts, index.ts, refresh.ts. | tracker item |
pm-github-c093 | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #142 (ed0e3d6), with ownership correction #148 and native-owner reuse #158, preserves source lifecycle dates/reasons and provider ownership. Retained evidence: import-fidelity.ts, index.ts, test/atomic.test.ts. | tracker item |
pm-github-sagl | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): The read-only divergence inventory is delivered in docs/daily-release-refresh.md; pm-ops PR #183 now also ships a shared workflow. New consumer migration belongs to package-owned follow-ups, not this completed inventory item. Retained evidence: docs/daily-release-refresh.md. | tracker item |
pm-github-julo | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #106 (888b29f) delivered the dated certification. Current package.json/lockfile have subsequent toolchain updates; historical certification is not a claim of current exact-head acceptance. Retained evidence: scripts/prepare-merge-driver.ts, test/prepare-merge-driver.test.ts. | tracker item |
pm-github-znig | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #139 (6d9cc23) resolves reusable workflow release versions at runtime from job.workflow_sha and release tags. Retained evidence: test/import-gate.test.ts, test/self-versioned-workflows.test.ts. | tracker item |
pm-github-ygye | OBSOLETE | Reverified main eebda9277e52 (unchanged since audit): PR #139 explicitly replaces automatic workflow stamping with runtime release-version resolution. Its design removes the need for a release GitHub App and corresponding app credentials. Retained evidence: test/import-gate.test.ts, test/self-versioned-workflows.test.ts. | tracker item |
pm-github-2ao1 | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): Installed official @unbrained/pm-cli CHANGELOG.md:266 records GH-1418 'Accept real Bun filtered-test execution receipts' in 2026.10.7. Current host/npm latest is 2026.10.21; the 2026.10.6 reproduction predates that published repair. Retained evidence: node_modules/@unbrained/pm-cli/CHANGELOG.md. | tracker item |
pm-github-6vcq | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): PR #99 (31072de) delivered the dated certification. Current package.json/lockfile have subsequent toolchain updates; historical certification is not a claim of current exact-head acceptance. Retained evidence: scripts/prepare-merge-driver.ts, test/prepare-merge-driver.test.ts. | tracker item |
pm-github-sx18 | FIXED-STALE | Reverified main eebda9277e52 (unchanged since audit): .github/workflows/codeql.yml exists on main and registers code scanning; the item asks to enable this workflow, not to certify all security properties. Retained evidence: .github/workflows/codeql.yml. | tracker item |
Items left open because the pinned CLI refused a guarded-format write:
pm-github-f1ev: Pinned CLI refused guarded item format because the declared project host range includes an incompatible runtime; dependency or host-contract changes are outside tracker-only scope.pm-github-2o9k: Pinned CLI refused guarded item format because the declared project host range includes an incompatible runtime; dependency or host-contract changes are outside tracker-only scope.
Validation: npm ci; npm run changelog:full; linked npm run changelog:check through the pinned CLI; final npm run changelog:check; node_modules/.bin/pm --no-extensions health; git diff --check. Full local release gates were intentionally left to CI for this tracker-only change.
Health exit: 0. No code, dependency pins, existing history records, releases or tags changed. This PR is left unmerged.
Summary by Sourcery
Reconcile 28 delivered tracker items and update their histories and generated changelog without changing application code.
Enhancements:
- Reconcile audited tracker entries with delivery already present on main by recording evidence and closing, canceling, or linking duplicate records.
- Regenerate the changelog to include the reconciled delivered work under the appropriate release sections.
Chores:
- Leave two tracker items open because the pinned CLI rejected their guarded-format updates.
Summary by cubic
Closes 28 open or in-progress tracker items whose source delivery is already on main, so the tracker no longer lists delivered work as outstanding.
- Items were closed as FIXED-STALE, canceled as obsolete (
pm-github-ygye), or linked to their canonical duplicate (pm-github-n0mm), each with reverified main evidence. - Two items (
pm-github-f1ev,pm-github-2o9k) stay open because the pinned CLI refused a guarded-format write; dependency or host-contract changes are outside tracker-only scope. - Only tracker records, append-only item history, and the generated changelog changed; no code, dependency pins, history records, releases, or tags were touched.
Validation: npm ci, changelog generation and check, PM health (exit 0), and git diff --check all passed; full release gates were left to CI.