Skip to content

[P0] green lock evidence regen (CLI audit P0-3) - #51

Merged
echobt merged 5 commits into
mainfrom
cursor/green-lock-evidence-regen-38e8
Sep 8, 2026
Merged

[P0] green lock evidence regen (CLI audit P0-3)#51
echobt merged 5 commits into
mainfrom
cursor/green-lock-evidence-regen-38e8

Conversation

@echobt

@echobt echobt commented Sep 8, 2026

Copy link
Copy Markdown
Contributor

Summary

Implements CLI audit P0-3. Designer cli signed CLI_100_CHROME_LOCK_SIGNED with Q9 / LOCK GO on runtime packs.

Tip SHA: 623c74e644611cd494a2135a87d023570ae7d6cf

Green-lock asserts live in lock_palette.rs, compiled only as #[cfg(test)] mod lock_palette so the production lib does not see unused helpers (Clippy). lock_proof.rs is 3372 and lock_v2.rs is 1466 — at QUALITY_BASE c7eab962. Local quality.py --base origin/main was 0 regressions; cargo clippy -p cortex-tui --lib --tests is clean with the CI allow-list.

PNGs: 504 written, 477 changed vs violet. Not modified in the clippy follow-up. intro.gif / #44 untouched.

Generators / tests / docs (no runtime chrome change)

  • scripts/render-tui-lock.sh / render-tui-lock-v2.sh gate on ≥40 exact #1F4945 and fail on violet.
  • Lock README + themes: banner green, thinking is dim #6B7280.
  • lock_palette (test-only) bans #A78BFA, #221A38, #C9A95C at both sizes.

v1 splash 120×40 macOS window, banner green caret
v1 login 120×40, green focused option
v2 welcome-cortex runtime 120×40, green composer caret

Test plan

  • cargo fmt --all -- --check
  • cargo clippy --locked -p cortex-tui --lib --tests with CI allow-list — clean
  • python scripts/readiness/quality.py --base origin/main — 0 regressions
  • cargo test --locked -p cortex-tui --lib -- lock_palette — 3 passed
  • TUI / snapshot tests for every surface this PR touches
  • cargo audit — not rerun (no dependency change)
  • Pillow scan: 0 violet; ≥40 green on splash / session_empty / welcome-cortex
  • Designer cli LOCK GO on runtime packs

Attestation (required)

I attest that:

  • Security reviewed — auth, exec/sandbox, path traversal, network egress, and secret handling in this diff were reviewed. No secrets, tokens, or keyring dumps are in the change.
  • Product-facing errors — user-visible failures use Cortex product copy. API-down paths say The coding service is temporarily unavailable. No raw provider, SDK, or transport names.
  • TUI verified — generators/tests/docs/evidence only. Headless lock suite green. No style.rs / widget paint change.
  • Tests added — green-lock palette asserts are test-only in lock_palette.rs.
  • No secrets — no API keys, WorkOS secrets, R2/AWS credentials, or .env files are included.

Risk

Docs/evidence/test-only. Runtime accent is already #1F4945 (PR #40). Designer cli has LOCK GO on runtime packs.

To show artifacts inline, enable in settings.

Open in Web Open in Cursor 

echobt and others added 5 commits September 8, 2026 01:47
Align lock generators, README, and headless tests with the signed
#1F4945 chrome lock. Violet asserts and gold copy are retired.

Co-authored-by: Mathis <echobt@users.noreply.github.com>
Settings and shortcuts overlays share the composer box language.
Keep the lock test from treating those frames as a no-op or a fail.

Co-authored-by: Mathis <echobt@users.noreply.github.com>
Replace historical violet PNG evidence at 40x12 and 120x40 with the
signed #1F4945 lock. intro.gif is unchanged.

Co-authored-by: Mathis <echobt@users.noreply.github.com>
Move the new palette/rounded-box checks into lock_palette.rs so
lock_proof.rs and lock_v2.rs stay at their QUALITY_BASE line counts.

Co-authored-by: Mathis <echobt@users.noreply.github.com>
Keep green-lock helpers out of the production lib so clippy does not
flag unused imports when the crate is built without tests.

Co-authored-by: Mathis <echobt@users.noreply.github.com>
@echobt
echobt marked this pull request as ready for review September 8, 2026 02:28
@greptile-apps

greptile-apps Bot commented Sep 8, 2026

Copy link
Copy Markdown

Too many files changed for review (489 files, 100 file limit).

Bypass the limit by tagging @greptile-apps to review.

@echobt
echobt merged commit 9154266 into main Sep 8, 2026
16 checks passed
@echobt
echobt deleted the cursor/green-lock-evidence-regen-38e8 branch September 8, 2026 02:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant