Repository navigation
perf(security-issue-sync): compute the Step 1 date and marker observations as code - #1711
Merged
Merged
Conversation
…tions as code The Step 1 observations that are arithmetic move into the issue-sync family: - disclosure (1a): the issue's age and the overdue, approaching, grace-expired and distributor-pending flags from the configured window; - staleness (1c): whether the reporter thread is stale against the response timeout, the clock stopped while the reporter has the last word; - closed-announced (1g): the cve.org move (notify, already notified, wait, blocker, retry, skip), the security-pages checklist and reminder marker scan, and the advisory-records step and planner exit; - release-vote (1h): an open [VOTE] thread whose version matches the fix-PR milestone, a [RESULT] closing it. gather.md shrinks by 42 lines, and the multi-scope split procedure moves from the SKILL.md Guardrails to outcomes/scope-split.md behind a one-line rule, bringing SKILL.md to 6,948 tokens (7,006 before layer 4b). The 38 remaining model cases of the skill pass. Part of #1672 Generated-by: Claude Opus 5
potiuk
force-pushed
the
perf/security-4b2-sync
branch
from
October 19, 2026 15:45
eafc6b0 to
b671c69
Compare
github-actions
Bot
added
family:security
potiuk
added a commit
that referenced
this pull request
Oct 19, 2026
Hand-sync of tools/spec-loop/specs/ with the functionality that landed between ccb53a3 and 03c15a6. Specs changed: - security-issue-lifecycle: the tools/security-management shared library gains drafting, recipients and numbered; the package reuses github-body-field, generate-cve-json and magpie-vcs (the embargo scrub); every skill of the family now has its CLI family, completing the deep split (#1672); the Validation block runs its pytest suite. - .last-sync bumped to 03c15a6. No spec change needed (specs already updated in the commit itself): 03c15a6 (#1712), c819c90 (#1711), dacf00a (#1710), cb6bb8b (#1705). Exempt: aee01bf (the previous sync), 0bd021f (npm pin bump in prek hooks). Generated-by: Claude Opus 5
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Layer 4b part 2 of the security-family deep split (#1672), stacked on #1710: the Step 1 observations of
security-issue-syncthat are arithmetic on dates, labels and markers move into theissue-syncfamily oftools/security-management.disclosureoverdue_for_disclosure,approaching_window_end,grace_period_expired,distributor_notify_pendingfrom the configured window and grace periodstalenessreporter_response_timeout_days; the clock never runs while the reporter has the last wordclosed-announcedrelease-vote[VOTE]thread whose version matches the fix-PR milestone; a[RESULT]message closes itgather.mdshrinks by 42 lines. The multi-scope split procedure moves out of the SKILL.md Guardrails intooutcomes/scope-split.mdbehind a one-line rule, soSKILL.mdends at 6,948 tokens — below the 7,006 it had before #1710.Mining signals, the
signals-to-actionsproposals, the process step and the next-step recommendation stay with the model; all 38 remaining model cases of the skill pass on a self-eval.Part of #1672
Generative AI disclosure
Drafted with Claude Code (Claude Opus 5) and reviewed by the author.
🤖 Generated with Claude Code