Repository navigation

feat: runtime-gate — boot web apps and use them in a real browser before merging - #6

Merged

rishitank merged 20 commits into

mainfrom

feat/runtime-gate

Oct 9, 2026

Merged

feat: runtime-gate — boot web apps and use them in a real browser before merging#6
rishitank merged 20 commits into
mainfrom
feat/runtime-gate

Commits on Oct 8, 2026
- feat(runtime-gate): add the runtime-gate toolkit
  
  rishitank
  and
  claude
  committed
  93322a6
- feat(runtime-gate): reusable runtime-gate workflow, self-test and docs
  
  rishitank
  and
  claude
  committed
  7793cd7
- feat(runtime-gate): operate every safe control, not just disclosures
  
  rishitank
  and
  claude
  committed
  f6260c0
- feat(runtime-gate): interact-max input; pin toolkit to f6260c0
  
  rishitank
  and
  claude
  committed
  8040381
- feat(runtime-gate): fill and submit forms with dummy data
  
  rishitank
  and
  claude
  committed
  95576dc
- feat(runtime-gate): forms input; pin toolkit to 95576dc
  
  rishitank
  and
  claude
  committed
  8e8a197
- docs(lighthouse): example config runs 5 times and asserts on the median run
  
  rishitank
  and
  claude
  committed
  6a0a682
- docs(lighthouse): example aggregates with "median", not "median-run"
  
  rishitank
  and
  claude
  committed
  a81f835
- feat(runtime-gate): signed-in crawl, recorded flows, prompt-injection screening, coverage and flake control
  
  rishitank
  and
  claude
  committed
  715af0e
- feat(runtime-gate): pin the toolkit at 715af0ee0d7198e02581641db2cc10492ae37707 and add runtime-gate-flows.yml
  
  rishitank
  and
  claude
  committed
  f1ad747
- fix(runtime-gate): sign in before the signed-out crawl; never re-post forms via history
  
  rishitank
  and
  claude
  committed
  1064cf0
- chore(runtime-gate): pin the toolkit at 1064cf0fcb847ed346a02964ec4bc432bfad3202
  
  rishitank
  and
  claude
  committed
  f5b19af
Commits on Oct 9, 2026

Navigation Menu

Repository navigation

feat: runtime-gate — boot web apps and use them in a real browser before merging - #6

feat: runtime-gate — boot web apps and use them in a real browser before merging#6
rishitank merged 20 commits into
mainfrom
feat/runtime-gate

Commits on Oct 8, 2026

feat(runtime-gate): add the runtime-gate toolkit

feat(runtime-gate): reusable runtime-gate workflow, self-test and docs

feat(runtime-gate): operate every safe control, not just disclosures

feat(runtime-gate): interact-max input; pin toolkit to f6260c0

feat(runtime-gate): fill and submit forms with dummy data

feat(runtime-gate): forms input; pin toolkit to 95576dc

docs(lighthouse): example config runs 5 times and asserts on the median run

docs(lighthouse): example aggregates with "median", not "median-run"

feat(runtime-gate): signed-in crawl, recorded flows, prompt-injection screening, coverage and flake control

feat(runtime-gate): pin the toolkit at 715af0ee0d7198e02581641db2cc10492ae37707 and add runtime-gate-flows.yml

fix(runtime-gate): sign in before the signed-out crawl; never re-post forms via history

chore(runtime-gate): pin the toolkit at 1064cf0fcb847ed346a02964ec4bc432bfad3202

Commits on Oct 9, 2026

fix(runtime-gate): scope expected 4xx to the submitted form; harden sign-in check, static server and entry points

fix(runtime-gate): per-submission ownership in the crawler; robust entry points

test(runtime-gate): free ports, real assertions and regression tests for the review fixes

fix(runtime-gate): post the PR comment from its own job; pin third-party actions; docs

fix(runtime-gate): comment from its own job, pin third-party actions, pin the toolkit at 9842c78a4caec4d9a5ae2305533175a5c6cee0f9

fix(runtime-gate): runtime-gate.yml comment job, action pins and toolkit pin; docs

docs(runtime-gate): the Gemini key is not hidden from an app running beside the explorer

Merge branch 'main' into feat/runtime-gate