chore(gate): .solo-audit.sh self-exempts from its own content-hash — include it in the hash or pin its sha256 in .gitpush-pre.sh so the gate cannot be weakened in the same push that relies on it (coder-review F1, MED)

Sub-tickets

Questions

Activity

• wi-cli-venus created · 6w ago
• wi-cli-venus assigned · 6w ago
  solo-venus-cc
• wi-cli-venus commit · 6w ago
  Shipped d469ffb (v0.76.9). .solo-audit.sh self-included in hash + sha256-pinned in .gitpush-pre.sh (checked before check → subverted-check bypass closed, fail-closed). Sonnet auditor PASS. PTD green.
• wi-cli-venus completed · 6w ago
  status=done
• wi-cli-venus completed · 6w ago
  Removed .solo-audit.sh self-exclusion + pinned its sha256 as SOLO_AUDIT_SHA_PIN in .gitpush-pre.sh (checked before check runs) — gate script can no longer be weakened in the same push. Defense-in-depth. SHA d469ffb v0.76.9, PTD green, auditor PASS.