Pular para conteúdo

AUR-589: evidencia historica sem podridao

Todo aceite de card done termina em exatamente um estado medido: verde (exit 0) ou aposentado explicitamente (exit 69, imprimindo AUR-NNN/retired: <motivo de produto> com o commit ou card que removeu o que ele provava). A tabela no fim deste arquivo e a fonte unica: tests/acceptance/AUR-589.sh e o workflow noturno leem dela.

Medido antes

Varredura de 2026-10-03 no main (container efemero, all e, se 64, AC-001): 67 aceites de cards done saiam 1, 79 ou ja 69. Rerodados no aurum-go compartilhado em 2026-10-06 sobre a base 94607605, com as mesmas classes:

  • produto de documentacao removido em 670c7f6d (internal/documentation, cmd/regenerate-docs, welcome, site/scaffold, internal/pipeline): 308, 424-429, 445, 447, 455-457, 463-465, 472, 474, 483, 484 (entrypoint_missing/missing_input);
  • era Task Master, legado e pins de bootstrap/perfis repinados: 001, 002, 233, 359-364, 403-411 (baseline-drift, runner-digest-mismatch, source_integrity_error, registry result=schema-invalid, lock publishes an unpinned or foreign image);
  • copia enumerada de pacotes que nao existem mais (cp: can't stat .../internal/documentation, build_failed): 431, 433, 436, 438, 442, 444, 451, 452, 460;
  • pontes e comportamento: 440, 441, 443, 446, 466, 481 (selector:...:exit:1), 487 (FAIL AUR-487 hero CTA);
  • ancoras movidas pelo AUR-584/585/567: 515 e 536 (missing-source de aur515.go/aur536.go), 533 (mutation-anchor-not-unique), 557 (aninhado 533), 558 (saia 1 sem nenhuma linha: before="$(grep -Fc ...)" sem match sob set -e), 573 (mutation-anchor-missing);
  • ambiente: 534 (missing_baked_dockerfile: AC-004 so roda na imagem selada).

O que mudou

  • Verdes por staging: 431, 433, 436, 437, 441, 442, 452, 460, 498 copiam go.mod go.sum cmd internal pkg inteiros (437 e 498 eram verdes mas copiavam pacote enumerado, o que a guarda AC-003 reprova). Os scripts antigos passam a respeitar o GOCACHE do chamador (${GOCACHE:-$run_dir/...}).
  • Fixtures no contrato atual: as respostas fake do modelo de 431, 433, 436 e 441 ganham evidence/impact/verification (o portao de escopo e evidencia do AUR-541 descarta achado sem eles; o AUR-541 fez o mesmo nos e2e). 433: a fronteira de --limite foi rederivada (0,10 para 0,05; a estimativa caiu para US$ 0,0313 quando o prompt encolheu), mesma semantica: abaixo da estimativa recusa, acima admite.
  • 466 e 481: o passe deterministico (229943e4) soma a sua propria linha analysis/sql-injection; a contagem passa a ser por rule security/sql-injection, e a MUT-002 primeiro prova que o binario sem mutacao imprime a linha (nao passa vazia).
  • Ancoras reancoradas com a mesma semantica: 533 MUT-002 (contribuidor analysis-data devolve decisao vazia e sem auditoria), 515 (review_pr_inputs.go), 536 (checkout_identity.go, verified_checkout.go), 573 (../../cmd/analysis-data), 558 MUT-002 (a ancora e o sed do AUR-538 sao movidos para a linha de comentario // limitations. de internal/gate/outcome.go: a mutacao aplica, compila e nao tem efeito, e o seletor de mutacao do 538 deixa de dar RED, como o card pede).
  • Aposentados (69 em todo seletor): 51 linhas 69 na tabela, cada uma com o motivo de produto e o commit; o cabecalho de cada script repete o motivo. Pontes usadas so por aceites aposentados foram removidas: tests/{unit,integration}/AUR-440.go e AUR-446.go, tests/integration/AUR-001.go, tests/{contracts,integration,unit}/AUR-403..411.go, tests/{integration,unit}/AUR-428.go, AUR-438.go, AUR-451.go, AUR-459.go (grep: so .board/, docs/specs/ e o proprio grupo as citavam; go vet ./tests/... limpo). Ficam as citadas por script ou ponte viva: 432 e 475 (tests/e2e), 434 e 435 (pontes do 448/442), 443 (AUR-547), 461 (tests/unit/AUR-467.go); tests/e2e/* fica (fora dos paths).
  • Novo aceite tests/acceptance/AUR-589.sh e workflow acceptance-sample.yml (abaixo).

Fora desta execucao (lista fixa em allowed_outside)

card por que
AUR-534 AC-004 compara /opt/aurum-a006 assado na imagem selada; so roda no oci-run
AUR-590 AC-003 prova o cache de modulos offline da imagem selada (go list -m all com GOPROXY=off); no aurum-go sai 1 com go: module lookup disabled by GOPROXY=off; so roda no oci-run
AUR-436 card proprio (abaixo)
AUR-460 card proprio (abaixo)

Depois do merge do AUR-590 (v2 deste card), 448, 458, 491 e 547 voltam a ser linhas 0: 448/458/491 consertados pelo AUR-590, e tests/acceptance/AUR-547.sh passa a esperar 466 e 481 verdes e 443 aposentado (exit 69 com motivo; as outras fontes que ele prova, 448/449/458, continuam exigidas verdes, e a MUT-001 encena a copia removida no AUR-448, cujo copy() reprova como infraestrutura do mesmo jeito).

Nenhum aceite exige docker no host: 554, 559, 561-564, 581, 586-588 passam no container sem docker (so comparam out/ com expected/).

Cards proprios a abrir

  • AUR-436 (escolher qual IA revisa): o staging foi consertado (cmd/internal/pkg inteiros, fixtures com evidence/impact/verification) e todos os subtestes passam, menos um: review sem provedor configurado agora sai 0 com relatorio so deterministico, e o aceite exige 1. O card proprio decide o contrato (o AUR-590 alinhou o 448 ao exit 0) e alinha tests/unit/AUR-436.go/tests/acceptance/AUR-436.sh ou o produto.
  • AUR-460 (qualquer modelo do gateway): o staging foi consertado; a resposta fake do gateway em tests/e2e/AUR-460.sh nao traz evidence/impact/verification, entao o portao de escopo e evidencia (AUR-541) descarta o achado e o e2e reprova. O conserto e so nesse e2e, que esta fora dos paths deste card; o card proprio precisa de tests/e2e/AUR-460.sh.

Aceite

tests/acceptance/AUR-589.sh:

  • AC-001 le a tabela, roda cada linha 0/69 (all; AC-001 se o script nao conhece all) e exige o exit da tabela; um 69 tambem precisa imprimir AUR-NNN/retired: com pelo menos 20 caracteres de motivo. AUR589_SHARD=i/n e AUR589_JOBS=k repartem. Antes, coverage: fora so na lista fixa, sem linha duplicada, todo script que se declara aposentado e linha 69 e vice-versa, e (com .board presente) todo card done tem linha.
  • AC-003 reprova qualquer copy/cp ou required_inputs=(...) em tests/acceptance/AUR-*.sh que nomeie internal/<pacote>.
  • MUT-001 do card (MUT-001 ou AC-003-MUT-001): numa copia do AUR-437 em $run_dir, a linha copy "$root" cmd internal pkg ... volta a copy "$root" internal/git/githubclient ...; AC-003 reprova.
  • MUT-002 do card (MUT-002 ou AC-001-MUT-001): numa copia do stub do AUR-308, exit 69 vira exit 0; AC-001 reprova a linha.
  • all (seletor padrao, usado pelo oci-run): coverage, AC-003, as duas mutacoes e AC-001 sobre a amostra fixa (001, 308, 359, 403, 437, 498). full: coverage, AC-003 e AC-001 sobre a tabela inteira (passa de 600 s; roda no aurum-go e no workflow por lotes).

Workflow noturno

.github/workflows/acceptance-sample.yml roda dentro de golang:1.27.1-alpine3.24@sha256:8a5910f3... (a mesma do CI) com apk add bash git python3, go mod download e safe.directory, em 6 lotes (AUR589_SHARD=i/6): cada lote roda a sua fatia de todas as linhas 0/69 da tabela, entao 563, 564 e todo aceite verde entram, e podridao nova aparece no dia seguinte. AC-002 (workflow_dispatch real com link) fica para o coordenador depois do push: gh workflow run acceptance-sample.yml --ref card/AUR-589.

Provas

Executado em 2026-10-06 no aurum-go compartilhado (imagem aurum-dev-go:1.27.1-2026-10-02), cwd no worktree:

  • AUR589_JOBS=2 bash tests/acceptance/AUR-589.sh full em c6cfa888 (17:19-18:09, sem nenhuma mudanca na arvore durante a execucao): 171 linhas; as 170 linhas reais da tabela bateram (119 com exit 0, 51 com exit 69 e motivo); a 171a era uma linha AUR-590 | 0 que o gerador da tabela copiou do board do checkout principal (onde o AUR-590 ja estava done) e que nao existe nesta arvore: AUR-590 0 missing - missing-script, AUR-589/full/rows:171 bad:1. O commit seguinte remove essa linha e acrescenta ao coverage a guarda row-without-script (linha 0/69 sem aceite reprova cedo); nenhum aceite mudou. Execucao anterior iniciada em 8e73170a (a remocao das pontes, 88b6a58a, entrou durante ela): AUR-589/full/rows:170 bad:0, AUR-589/full/pass.
  • bash tests/acceptance/AUR-589.sh all (12 s com cache quente): amostra 001, 308, 359, 403 (69) e 437, 498 (0); AUR-589/AC-003-MUT-001/rejected (enumerated internal copy fails AC-003), AUR-589/AC-001-MUT-001/rejected (retired stub exiting 0 fails AC-001), AUR-589/all/rows:6 bad:0, AUR-589/all/pass.
  • coverage: com .board/cards/done presente, os 177 cards done tem linha; AUR-589/coverage/pass. AC-003: AUR-589/AC-003/pass.
  • Mutacoes dos aceites reancorados, rodadas uma a uma: AUR-515/AC-001-MUT-001/pass (mutation produced RED), AUR-536/AC-001-MUT-002/pass (mutation produced RED), AUR-536/AC-002-MUT-001/pass (mutation produced RED); 533 e 573 rodam as suas no all (AUR-533/all/pass, AUR-573/all/ok); 558 all inclui a MUT-002 (AUR-558/all/pass).
  • Selado (v2, depois do merge do AUR-590 e do repin da imagem): oci-run --profile go-unit-offline-v1 --card AUR-589 com cwd no worktree sai 0 (exit_code 0); o aceite roda all, imprime board-absent (o .board nao e materializado) e termina AUR-589/all/rows:6 bad:0. Na v1 ele saia 79 antes do aceite porque a imagem pinada no main de entao nao existia mais no host.
  • v2: bash tests/acceptance/AUR-547.sh all -> AUR-547/all/pass; 448, 458, 491 all -> 0; AUR-589.sh coverage e all -> pass. A execucao full acima e anterior ao merge (as linhas 448/458/491/547 entraram como 0 com as execucoes individuais desta lista).
  • Run 37533326168 do workflow na branch: 4 lotes verdes, 2 com uma divergencia cada. AUR-491 (getting-started does not distinguish historical tags): o grep do alpine e o busybox, e com locale C o colchete hist[oó]rica guarda um byte e nao casa o ó de dois bytes. Provado na imagem do CI: LC_ALL=C -> old-bracket-FAIL, LC_ALL=C.UTF-8 -> old-bracket-ok. Conserto duplo: o job roda com LANG=C.UTF-8/LC_ALL=C.UTF-8 (o musl suporta nativo) e o AUR-491.sh casa por alternancia hist(o|ó)rica/mem(o|ó)ria, que passa nos dois locales (new-alt-ok em C e em C.UTF-8). AUR-564 (operacao/bloco-diverge) e corrigido pelo AUR-593.
  • Run 37539117646 (b25d39a7, depois do merge do AUR-593): lote 2 verde; lotes 1, 3, 4, 5 e 6 vermelhos com 7 divergencias, todas reproduzidas no aurum-go sobre o main com o AUR-593 (podridao nova do proprio main, que o workflow existe para mostrar): 491 (documented flags absent from the product help: --relative --unified), 496 (AC-003/runs-pr-code), 522 (pr-mutation-anchor-not-unique, 79), 538 (nested-selector-failed:AC-001-MUT-001), 557 (nested-green:AUR-533), 558 (mutation-red:543:N1-MUT-001), 573 (aninhado 496). AUR-593 sem linha roda esperando 0 e passou. Selado em b25d39a7: exit_code 0, rows:6 bad:0.
  • v3 (merge do main com o AUR-593, 018e71d6): as 7 divergencias eram ancora, nenhuma defeito de produto. 491: docs/configuration.md citava git diff --relative --unified=0 em prosa; vai para bloco sh (bloco que nao e aurumcode nao conta como flag do produto), o aceite nao muda. 496: o AUR-593 criou o passo de prefetch de modulos (go mod download na montagem somente-leitura, GOTOOLCHAIN=local, sem segredo); so a linha exata if [ ! -f .aurumcode-target/go.mod ]; then sai do filtro, o resto continua checado; MUT-002 segue reprovando. 522: o --pr agora soma p.binaryNotices... antes de uninspectedPRNotices(...)...; a mutacao troca so a segunda por []analyzer.DiffNotice(nil)... e tres testes do --pr ficam FAIL. 538: o AUR-593 passou a reter aprovacao pela cobertura estrutural tambem no --base (structural_coverage.go), e o arquivo gerado do fixture dispara isso, entao tirar so o marcador do gate sobrevivia; a mutacao neutraliza os dois marcadores. Controle medido: so o estrutural neutralizado, gate intacto -> os dois testes ok; os dois neutralizados -> --- FAIL: TestAUR538BaseCleanFixtureVerdictWithheldUnderBlock. 557, 558 e 573 eram aninhados (522/538/496) e voltaram sem mudanca propria. Provas no aurum-go: AUR-491/all/pass, AUR-496/MUT-002/pass, AUR-522/all/pass, AUR-538/all/pass, AUR-543/all/pass, AUR-557/all/pass, AUR-558/all/pass, AUR-573/all/ok.
  • Run 37544453082 (6b8a3811): lotes 1-5 verdes; lote 6 so com AUR-588 AC-004/check-red: o manifesto de capturas guarda o sha256 de docs/configuration.md, que a v3 mudou. bash scripts/docs/capturas.sh regravou so o manifesto (as duas imagens de configuration sairam identicas); AUR-588/all/pass. docs/assets/capturas/capturas.json esta fora dos paths deste card (consequencia direta de editar docs/configuration.md).
  • AC-002: workflow_dispatch real em 272c9966, run 37546613646 (https://github.com/Mpaape/AurumCode/actions/runs/37546613646): os 6 lotes success. Selado no mesmo SHA: exit_code 0, AUR-589/all/rows:6 bad:0.
  • (historico) AC-002 pendente: o workflow_dispatch real precisa de push (coordenador).

Tabela por card

card saida motivo
AUR-001 69 the legacy product it inventoried and characterized was removed in 670c7f6d (Focus AurumCode on code review)
AUR-002 69 the legacy product it inventoried and characterized was removed in 670c7f6d (Focus AurumCode on code review)
AUR-003 0 verde
AUR-004 0 verde
AUR-005 0 verde
AUR-006 0 verde
AUR-009 0 verde
AUR-011 0 verde
AUR-012 0 verde
AUR-014 0 verde
AUR-015 0 verde
AUR-016 0 verde
AUR-017 0 verde
AUR-018 0 verde
AUR-019 0 verde
AUR-020 0 verde
AUR-021 0 verde
AUR-233 69 the bootstrap lockset and toolchain pins it verifies were intentionally repinned by AUR-534 (03ba3f84, Go 1.21 to 1.27) and AUR-522 (83753f5d)
AUR-308 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-309 69 legacy pipeline characterization fixture was removed; this acceptance can no longer be proven and is not a pass
AUR-318 0 verde
AUR-359 69 the bootstrap lockset and toolchain pins it verifies were intentionally repinned by AUR-534 (03ba3f84, Go 1.21 to 1.27) and AUR-522 (83753f5d)
AUR-360 69 the bootstrap lockset and toolchain pins it verifies were intentionally repinned by AUR-534 (03ba3f84, Go 1.21 to 1.27) and AUR-522 (83753f5d)
AUR-361 69 the bootstrap lockset and toolchain pins it verifies were intentionally repinned by AUR-534 (03ba3f84, Go 1.21 to 1.27) and AUR-522 (83753f5d)
AUR-362 69 the bootstrap lockset and toolchain pins it verifies were intentionally repinned by AUR-534 (03ba3f84, Go 1.21 to 1.27) and AUR-522 (83753f5d)
AUR-363 69 the bootstrap lockset and toolchain pins it verifies were intentionally repinned by AUR-534 (03ba3f84, Go 1.21 to 1.27) and AUR-522 (83753f5d)
AUR-364 69 the bootstrap lockset and toolchain pins it verifies were intentionally repinned by AUR-534 (03ba3f84, Go 1.21 to 1.27) and AUR-522 (83753f5d)
AUR-402 0 verde
AUR-403 69 the sealed OCI profile registry and image locks it pins were intentionally changed by 4aac0b6e (resource schema) and repinned by AUR-534 (03ba3f84, f9d64956) and AUR-522 (83753f5d)
AUR-404 69 the sealed OCI profile registry and image locks it pins were intentionally changed by 4aac0b6e (resource schema) and repinned by AUR-534 (03ba3f84, f9d64956) and AUR-522 (83753f5d)
AUR-405 69 the sealed OCI profile registry and image locks it pins were intentionally changed by 4aac0b6e (resource schema) and repinned by AUR-534 (03ba3f84, f9d64956) and AUR-522 (83753f5d)
AUR-406 69 the sealed OCI profile registry and image locks it pins were intentionally changed by 4aac0b6e (resource schema) and repinned by AUR-534 (03ba3f84, f9d64956) and AUR-522 (83753f5d)
AUR-407 69 the sealed OCI profile registry and image locks it pins were intentionally changed by 4aac0b6e (resource schema) and repinned by AUR-534 (03ba3f84, f9d64956) and AUR-522 (83753f5d)
AUR-408 69 the sealed OCI profile registry and image locks it pins were intentionally changed by 4aac0b6e (resource schema) and repinned by AUR-534 (03ba3f84, f9d64956) and AUR-522 (83753f5d)
AUR-409 69 the sealed OCI profile registry and image locks it pins were intentionally changed by 4aac0b6e (resource schema) and repinned by AUR-534 (03ba3f84, f9d64956) and AUR-522 (83753f5d)
AUR-410 69 the sealed OCI profile registry and image locks it pins were intentionally changed by 4aac0b6e (resource schema) and repinned by AUR-534 (03ba3f84, f9d64956) and AUR-522 (83753f5d)
AUR-411 69 the sealed OCI profile registry and image locks it pins were intentionally changed by 4aac0b6e (resource schema) and repinned by AUR-534 (03ba3f84, f9d64956) and AUR-522 (83753f5d)
AUR-422 0 verde
AUR-424 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-425 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-426 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-427 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-428 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-429 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-430 0 verde
AUR-431 0 verde: staging copia cmd/internal/pkg; fixtures com evidence/impact/verification (contrato do AUR-541)
AUR-432 69 the behavior this acceptance proved changed in the product (see docs/specs/AUR-586.md); it can no longer be proven as written and is not a pass
AUR-433 0 verde: staging inteiro; fixtures com evidencia; fronteira de --limite rederivada (0,10 para 0,05) apos o prompt encolher
AUR-434 69 the behavior this acceptance proved changed in the product (see docs/specs/AUR-586.md); it can no longer be proven as written and is not a pass
AUR-435 69 the behavior this acceptance proved changed in the product (see docs/specs/AUR-586.md); it can no longer be proven as written and is not a pass
AUR-436 fora fora, card proprio: staging consertado; resta o subteste de review sem provedor saindo 0 (mesmo comportamento do AUR-448, AUR-590)
AUR-437 0 verde: copia cmd/internal/pkg em vez de internal/git/githubclient (guarda AC-003)
AUR-438 69 the PR review now discards a model finding outside the added lines through the scope and evidence gate (internal/review/scope.go, OutsideAddedLines; recorded as intentional by AUR-541 a683b118) instead of posting it as a general comment
AUR-439 0 verde
AUR-440 69 the example workflow it pinned became a single-job caller of the reusable review.yml in 2cd157bc, so the job-level pull-requests grant it required no longer exists by design
AUR-441 0 verde: fixtures com evidencia; terceira execucao procura a linha do achado, nao o arquivo do resumo
AUR-442 0 verde: staging e required_inputs com cmd/internal/pkg
AUR-443 69 the first-use surface it pinned (review and docs subcommands) no longer exists: the docs subcommand was removed in 670c7f6d (Focus AurumCode on code review)
AUR-444 69 its unit, integration and e2e bridges (tests/unit/AUR-444.go, tests/integration/AUR-444.go, tests/e2e/AUR-444.sh) were deleted with the legacy surface in 670c7f6d (Focus AurumCode on code review)
AUR-445 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-446 69 the delivered behavior its spec cross-checks pinned (docs subcommand, --pr flag, client.go line anchors, ref v1 workflow) was removed or reshaped in 670c7f6d and later review cards
AUR-447 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-448 0 verde (consertado no AUR-590)
AUR-449 0 verde
AUR-450 0 verde
AUR-451 69 the PR publication contract changed: the --pr path posts a review summary after the findings and prints the published-count line instead of No issues found. (phases restructured in dd3716f0)
AUR-452 0 verde: staging e required_inputs com cmd/internal/pkg
AUR-453 0 verde
AUR-455 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-456 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-457 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-458 0 verde (consertado no AUR-590)
AUR-459 69 the behavior this acceptance proved changed in the product (see docs/specs/AUR-586.md); it can no longer be proven as written and is not a pass
AUR-460 fora fora, card proprio: staging consertado; a resposta fake de tests/e2e/AUR-460.sh nao tem evidence/impact/verification e tests/e2e esta fora dos paths deste card
AUR-461 69 the behavior this acceptance proved changed in the product (see docs/specs/AUR-586.md); it can no longer be proven as written and is not a pass
AUR-462 0 verde
AUR-463 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-464 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-465 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-466 0 verde: conta rule security/sql-injection (o passe deterministico 229943e4 soma a sua propria linha); guarda contra mutacao vacua
AUR-467 0 verde
AUR-468 0 verde
AUR-471 0 verde
AUR-472 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-473 0 verde
AUR-474 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-475 69 the behavior this acceptance proved changed in the product (see docs/specs/AUR-586.md); it can no longer be proven as written and is not a pass
AUR-476 0 verde
AUR-477 0 verde
AUR-479 0 verde
AUR-480 0 verde
AUR-481 0 verde: mesma contagem por regra do 466
AUR-483 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-484 69 the documentation generator it proved (internal/documentation, cmd/regenerate-docs, welcome page, site scaffold) was removed from the product in 670c7f6d (Focus AurumCode on code review)
AUR-486 0 verde
AUR-487 69 its AC-005 forbids @main in the published workflow snippet, but d3b50e74 made main the sole branch and pinned the example and site snippet to review.yml@main on purpose
AUR-489 0 verde
AUR-490 0 verde
AUR-491 0 verde (consertado no AUR-590); v3: configuration.md cita o diff do git do SAST (AUR-593) em bloco de codigo; acento casado por alternancia
AUR-492 0 verde
AUR-493 0 verde
AUR-496 0 verde; v3: aceita so a linha exata do prefetch de modulos do AUR-593 que testa go.mod
AUR-497 0 verde
AUR-498 0 verde: copia cmd/internal/pkg em vez de internal/changelog (guarda AC-003)
AUR-499 0 verde
AUR-500 0 verde
AUR-502 0 verde
AUR-503 0 verde
AUR-504 0 verde
AUR-505 0 verde
AUR-506 0 verde
AUR-507 0 verde
AUR-508 0 verde
AUR-511 0 verde
AUR-513 0 verde
AUR-515 0 verde: segue checkout_identity.go e review_pr_inputs.go (AUR-584); mutacao reancorada
AUR-517 0 verde
AUR-518 0 verde
AUR-519 0 verde
AUR-520 0 verde
AUR-521 0 verde
AUR-522 0 verde; v3: mutacao do --pr reancorada nos avisos de arquivo nao inspecionado (AUR-593 prefixa os binarios)
AUR-523 0 verde
AUR-524 0 verde
AUR-525 0 verde
AUR-533 0 verde: mutacao MUT-002 reancorada no contribuidor analysis-data (AUR-584)
AUR-534 fora fora: AC-004 compara os arquivos assados em /opt/aurum-a006 da imagem selada; so roda no oci-run
AUR-536 0 verde: segue checkout_identity.go e verified_checkout.go (AUR-584)
AUR-537 0 verde
AUR-538 0 verde; v3: MUT-001 neutraliza tambem o marcador da cobertura estrutural (AUR-593) para isolar o gate
AUR-539 0 verde
AUR-540 0 verde
AUR-541 0 verde
AUR-542 0 verde
AUR-543 0 verde
AUR-544 0 verde
AUR-547 0 verde: 466/481 passam a ser esperados verdes e 443 aposentado (69 com motivo); a MUT-001 encena no AUR-448
AUR-548 0 verde
AUR-549 0 verde
AUR-550 0 verde
AUR-551 0 verde
AUR-552 0 verde
AUR-554 0 verde
AUR-555 0 verde
AUR-556 0 verde
AUR-557 0 verde: o aninhado AUR-533 voltou a passar
AUR-558 0 verde: MUT-002 segue a ancora exata do AUR-538 (AUR-567); o grep -Fc sem match matava o script em silencio
AUR-559 0 verde
AUR-560 0 verde
AUR-561 0 verde
AUR-562 0 verde
AUR-563 0 verde
AUR-564 0 verde
AUR-565 0 verde
AUR-566 0 verde
AUR-567 0 verde
AUR-568 0 verde
AUR-569 0 verde
AUR-570 0 verde
AUR-571 0 verde
AUR-572 0 verde
AUR-573 0 verde: mutacao reancorada em ../../cmd/analysis-data (AUR-585)
AUR-574 0 verde
AUR-575 0 verde
AUR-576 0 verde
AUR-577 0 verde
AUR-578 0 verde
AUR-579 0 verde
AUR-580 0 verde
AUR-581 0 verde
AUR-582 0 verde
AUR-583 0 verde
AUR-584 0 verde
AUR-585 0 verde
AUR-586 0 verde
AUR-587 0 verde
AUR-588 0 verde
AUR-590 fora fora: AC-003 prova o cache de modulos offline da imagem selada; no aurum-go sai 1 (go: module lookup disabled by GOPROXY=off); so roda no oci-run
AUR-535 0 verde (entrou em done nos lotes #96/#104; AUR-601)
AUR-546 0 verde (entrou em done nos lotes #96/#104; AUR-601)
AUR-553 0 verde (entrou em done nos lotes #96/#104; AUR-601)
AUR-589 0 verde (entrou em done nos lotes #96/#104; AUR-601)
AUR-591 0 verde (entrou em done nos lotes #96/#104; AUR-601)
AUR-592 0 verde (entrou em done nos lotes #96/#104; AUR-601)
AUR-593 0 verde
AUR-594 0 verde (entrou em done nos lotes #96/#104; AUR-601)
AUR-595 0 verde (entrou em done nos lotes #96/#104; AUR-601)
AUR-596 0 verde (entrou em done nos lotes #96/#104; AUR-601)
AUR-597 0 verde (entrou em done nos lotes #96/#104; AUR-601)
AUR-598 0 verde (entrou em done nos lotes #96/#104; AUR-601)
AUR-599 0 verde (entrou em done nos lotes #96/#104; AUR-601)
AUR-454 0 verde (entrou em done no lote #120; parecer limpo)
AUR-469 0 verde (entrou em done no lote #120; parecer limpo)
AUR-470 0 verde (entrou em done no lote #120; parecer limpo)
AUR-494 0 verde (entrou em done no lote #120; parecer limpo)
AUR-495 0 verde (entrou em done no lote #120; parecer limpo)
AUR-501 0 verde (entrou em done no lote #120; parecer limpo)
AUR-509 0 verde (entrou em done no lote #120; parecer limpo)
AUR-510 0 verde (entrou em done no lote #120; parecer limpo)
AUR-512 0 verde (entrou em done no lote #120; parecer limpo)
AUR-514 0 verde (entrou em done no lote #120; parecer limpo)
AUR-516 0 verde (entrou em done no lote #120; parecer limpo)
AUR-526 0 verde (entrou em done no lote #120; parecer limpo)
AUR-527 0 verde (entrou em done no lote #120; parecer limpo)
AUR-528 0 verde (entrou em done no lote #120; parecer limpo)
AUR-529 0 verde (entrou em done no lote #120; parecer limpo)
AUR-530 0 verde (entrou em done no lote #120; parecer limpo)
AUR-531 0 verde (entrou em done no lote #120; parecer limpo)
AUR-532 0 verde (entrou em done no lote #120; parecer limpo)
AUR-545 0 verde (entrou em done no lote #120; parecer limpo)
AUR-600 0 verde (entrou em done no lote #120; parecer limpo)
AUR-601 0 verde (entrou em done no lote #120; parecer limpo)
AUR-602 0 verde (entrou em done no lote #120; parecer limpo)
AUR-603 0 verde (entrou em done no lote #120; parecer limpo)
AUR-604 0 verde (entrou em done no lote #120; parecer limpo)
AUR-605 0 verde (entrou em done no lote #126; provedor reserva)
AUR-606 0 verde (entrou em done no lote #140; guia de instalação com IA, aceite de documento)
AUR-607 0 verde (entrou em done no lote #158; saída em pt-BR de ponta a ponta)
AUR-608 0 verde (entrou em done no lote #158; gate.triage com padrão model)
AUR-609 0 verde (entrou em done no lote #158; evidência íntegra: redação e catálogo)
AUR-610 0 verde (entrou em done no lote #158; changelog obrigatório e PR de bot)
AUR-611 0 verde (entrou em done no lote #158; versão no parecer, na auditoria e no SARIF)
AUR-612 0 verde (entrou em done no lote #158; documentação de integração e arquitetura, aceite de documento)