3 Commits

Author	SHA1	Message	Date
Claude	e0ceae2490	Fix capabilities CI: pin Go 1.24 and capslock v0.3.1 ... The baseline was generated with Go 1.24 and capslock v0.3.1. Pin both in CI to ensure consistent analysis results, since different Go versions can change which capabilities capslock detects. https://claude.ai/code/session_01HwDXpKevFLhE5EfrR6JrBn	2026-03-24 02:01:33 +00:00
Claude	20a7856820	Simplify capability check to track names only, add docs and script ... Replace the full JSON baseline with a simple text file listing capability names per package. Add caps.sh script to generate and check the baseline. Document in CONTRIBUTING.md and AGENTS.md that PRs increasing capabilities are unlikely to be accepted. https://claude.ai/code/session_01HwDXpKevFLhE5EfrR6JrBn	2026-03-24 01:49:04 +00:00
Claude	478c2ff9d8	Add CI check to enforce capability limits using capslock ... Adds a capability baseline file and a GitHub Actions workflow that uses Google's capslock tool to detect if any new capabilities (file access, network, syscalls, etc.) are introduced by code changes. https://claude.ai/code/session_01HwDXpKevFLhE5EfrR6JrBn	2026-03-24 01:40:56 +00:00