[PR #3091] [CLOSED] imperative outcome becomes the squash-merge commit subject and generated changelog entry. #5609

Closed
opened 2026-10-31 01:07:57 +00:00 by bsakaguchi · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/morluto/rea/pull/3091
Author: @gryszzz
Created: 10/14/2026
Status: ❌ Closed

Base: main ← Head: rel/first-lab-foundations


📝 Commits (10+)

  • 1587200 docs(rel): add safe first-investigation learning lab
  • 930379a test(rel): verify local REA graph and evidence projection
  • a2f1e26 docs(rel): record verified REA findings and current proof limits
  • c99c1e0 feat(rel): add simple investigation intake and safe demo entrypoint
  • 9728130 docs(rel): make the fork README the practical CLI and Codex entry point
  • 1c5f58f test(rel): validate translated REA docs against preserved upstream README
  • 053a2e0 feat(rel): connect trusted Codex workspace and enable authorized static investigations
  • 132f35e fix(rel): retain fail-closed intake execution contract
  • 88b2d3e test(rel): prove MCP tool discovery for Codex project connection
  • bafb9b7 fix(rel): restore translated README fixtures and portable DEX schema validation

📊 Changes

66 files changed (+5726 additions, -372 deletions)

View changed files

➕ .agents/skills/ree-investigator/SKILL.md (+51 -0)
➕ .agents/skills/rel-investigator/SKILL.md (+8 -0)
📝 .agents/skills/reverse-engineer-anything/SKILL.md (+10 -0)
➕ .codex/config.toml (+9 -0)
📝 .github/workflows/ci-full-pr.yml (+1 -1)
📝 .github/workflows/ci.yml (+2 -2)
📝 .github/workflows/pr-title.yml (+1 -1)
📝 .github/workflows/real-javascript-recovery.yml (+6 -1)
➕ .github/workflows/rel-first-lab.yml (+79 -0)
➕ .github/workflows/rel-macos-smoke.yml (+79 -0)
📝 .github/workflows/release.yml (+12 -5)
📝 AGENTS.md (+16 -1)
➕ FIRST_10_MINUTES.md (+27 -0)
📝 README.md (+147 -328)
➕ REE_START_HERE.md (+68 -0)
➕ REL_START_HERE.md (+3 -0)
➕ Start-REE.command (+31 -0)
➕ Start-REL.command (+3 -0)
➕ UPSTREAM_REA_README.md (+385 -0)
➕ docs/fork-investigation-workflows.md (+113 -0)

...and 46 more files

📄 Description

Summary

Problem and expected behavior

Change and scope

Follow the contribution scope.
Unresolved scope, authority, side effects, or required verification block
integration. Link the required maintainer scope decision for new providers or
capabilities involving target execution, injection, mutation, or protection
recovery; ordinary fixes within existing boundaries may state "not applicable".
Draft PRs may leave the scope decision pending and the final review checklist
unchecked. Maintainers can help resolve open questions.

Contract and boundary impact

  • Semantic owner and earliest changed stage:
  • Contribution scope fit and linked maintainer decision:
  • CLI and MCP/tool-catalog contract:
  • Provider, bridge, target-format, or platform compatibility:
  • Evidence, artifact, provenance, or reconstruction contract:
  • Target selection, authority, upstream behavior, and cleanup details (if applicable):
  • Generated metadata (docs/public/product-catalog.json), package, or installation impact (CI generates and validates ignored catalogs and skills/; edit authored instructions in .agents/skills/reverse-engineer-anything/ and never commit build outputs):

Expected effects (check known effects; use documentation-only on its own).
Unchecked items do not establish absence; leave uncertainties visible.

  • Read existing files or captured data.
  • Launch or attach to a process.
  • Inject instrumentation or run scripts/code.
  • Change process memory, registers, files, or configuration.
  • Contact network services.
  • Recover protected code or work around protections.
  • Documentation or usability only; no target interaction.
  • Not sure yet; investigation or maintainer guidance needed.

Evidence and regression coverage

  • Tests added or updated:
  • Base reproduction or other evidence:
  • User-visible CLI/MCP output (if applicable):
  • Remaining proof gaps:

For evidence-bearing changes:

  • Observed, derived, and inferred claims remain distinguishable.
  • Artifact identity, source provenance, and failed attempts remain preserved.
  • Unsupported, incomplete, unavailable, or uncertain outcomes remain visible.

Validation performed

  • command — result

Compatibility, safety, and release

  • Breaking changes or migration steps:
  • Real Hopper/Ghidra, browser, or OS coverage:
  • Package or release metadata impact:
  • Security, privacy, process, or containment review:

Before merge

  • This PR addresses a concrete problem or an agreed enhancement.
  • Material scope and authority questions are resolved, and any required maintainer scope decision covers the final diff.
  • The PR has one focused outcome and the title follows type(scope): outcome.
  • Related issue is linked, or the reason for not linking one is stated above.
  • Tests cover changed observable behavior and meaningful failure paths.
  • Owning docs, contracts, and generated metadata are updated where needed.
  • User-visible CLI/MCP changes include representative output.
  • I checked the final diff for secrets, unrelated cleanup, and unsupported claims.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/morluto/rea/pull/3091 **Author:** [@gryszzz](https://github.com/gryszzz) **Created:** 10/14/2026 **Status:** ❌ Closed **Base:** `main` ← **Head:** `rel/first-lab-foundations` --- ### 📝 Commits (10+) - [`1587200`](https://github.com/morluto/rea/commit/1587200d7702e241b8d073d41fc08821cb6f1cef) docs(rel): add safe first-investigation learning lab - [`930379a`](https://github.com/morluto/rea/commit/930379a8ba06ef6eb975ae00afea1f1d7c5a6c17) test(rel): verify local REA graph and evidence projection - [`a2f1e26`](https://github.com/morluto/rea/commit/a2f1e2662c6e5e872fc687aa6474ed5c0f9bba1b) docs(rel): record verified REA findings and current proof limits - [`c99c1e0`](https://github.com/morluto/rea/commit/c99c1e0ebb3e75ee4149bda98f52b476e8f82005) feat(rel): add simple investigation intake and safe demo entrypoint - [`9728130`](https://github.com/morluto/rea/commit/97281306c05ca4da5d69654e8a17d7ea613b0957) docs(rel): make the fork README the practical CLI and Codex entry point - [`1c5f58f`](https://github.com/morluto/rea/commit/1c5f58f1fb9e4deba2b3ba3547da8ef07336c560) test(rel): validate translated REA docs against preserved upstream README - [`053a2e0`](https://github.com/morluto/rea/commit/053a2e03c031d0daca2df16a596b5c9dec309b7a) feat(rel): connect trusted Codex workspace and enable authorized static investigations - [`132f35e`](https://github.com/morluto/rea/commit/132f35ea4c77dce4411ff051f5d2e4a03e3a8024) fix(rel): retain fail-closed intake execution contract - [`88b2d3e`](https://github.com/morluto/rea/commit/88b2d3e7e85f04bc10da038fcf67e82c43363f1d) test(rel): prove MCP tool discovery for Codex project connection - [`bafb9b7`](https://github.com/morluto/rea/commit/bafb9b797c0a0b2f5c5eeea0774bf5bdeaaa3985) fix(rel): restore translated README fixtures and portable DEX schema validation ### 📊 Changes **66 files changed** (+5726 additions, -372 deletions) <details> <summary>View changed files</summary> ➕ `.agents/skills/ree-investigator/SKILL.md` (+51 -0) ➕ `.agents/skills/rel-investigator/SKILL.md` (+8 -0) 📝 `.agents/skills/reverse-engineer-anything/SKILL.md` (+10 -0) ➕ `.codex/config.toml` (+9 -0) 📝 `.github/workflows/ci-full-pr.yml` (+1 -1) 📝 `.github/workflows/ci.yml` (+2 -2) 📝 `.github/workflows/pr-title.yml` (+1 -1) 📝 `.github/workflows/real-javascript-recovery.yml` (+6 -1) ➕ `.github/workflows/rel-first-lab.yml` (+79 -0) ➕ `.github/workflows/rel-macos-smoke.yml` (+79 -0) 📝 `.github/workflows/release.yml` (+12 -5) 📝 `AGENTS.md` (+16 -1) ➕ `FIRST_10_MINUTES.md` (+27 -0) 📝 `README.md` (+147 -328) ➕ `REE_START_HERE.md` (+68 -0) ➕ `REL_START_HERE.md` (+3 -0) ➕ `Start-REE.command` (+31 -0) ➕ `Start-REL.command` (+3 -0) ➕ `UPSTREAM_REA_README.md` (+385 -0) ➕ `docs/fork-investigation-workflows.md` (+113 -0) _...and 46 more files_ </details> ### 📄 Description <!-- PR title: type(optional-scope): imperative outcome The title becomes the squash-merge commit subject and generated changelog entry. --> ## Summary <!-- What user, agent, or maintainer problem does this solve? Link the issue with "Fixes #123" when applicable. Keep the prior behavior, expected contract, and new behavior understandable without private context. --> ## Problem and expected behavior <!-- For fixes, give the smallest trigger and violated invariant. For features, describe the use case and observable outcome. --> ## Change and scope <!-- Explain the chosen approach, why it fits REA's architecture, and what is intentionally not included. --> Follow the [contribution scope](https://github.com/morluto/rea/blob/main/CONTRIBUTING.md#contribution-scope). Unresolved scope, authority, side effects, or required verification block integration. Link the required maintainer scope decision for new providers or capabilities involving target execution, injection, mutation, or protection recovery; ordinary fixes within existing boundaries may state "not applicable". Draft PRs may leave the scope decision pending and the final review checklist unchecked. Maintainers can help resolve open questions. ## Contract and boundary impact <!-- Short answers are welcome. Complete applicable lines; mark unresolved facts as "unknown". Use "none" or "not applicable" only when established. --> - Semantic owner and earliest changed stage: - Contribution scope fit and linked maintainer decision: - CLI and MCP/tool-catalog contract: - Provider, bridge, target-format, or platform compatibility: - Evidence, artifact, provenance, or reconstruction contract: - Target selection, authority, upstream behavior, and cleanup details (if applicable): - Generated metadata (`docs/public/product-catalog.json`), package, or installation impact (CI generates and validates ignored catalogs and `skills/`; edit authored instructions in `.agents/skills/reverse-engineer-anything/` and never commit build outputs): Expected effects (check known effects; use documentation-only on its own). Unchecked items do not establish absence; leave uncertainties visible. - [ ] Read existing files or captured data. - [ ] Launch or attach to a process. - [ ] Inject instrumentation or run scripts/code. - [ ] Change process memory, registers, files, or configuration. - [ ] Contact network services. - [ ] Recover protected code or work around protections. - [ ] Documentation or usability only; no target interaction. - [ ] Not sure yet; investigation or maintainer guidance needed. ## Evidence and regression coverage <!-- State whether evidence is executed, source-derived, or proposed. For fixes, explain how the regression would fail on the affected base revision when practical. --> - Tests added or updated: - Base reproduction or other evidence: - User-visible CLI/MCP output (if applicable): - Remaining proof gaps: For evidence-bearing changes: - [ ] Observed, derived, and inferred claims remain distinguishable. - [ ] Artifact identity, source provenance, and failed attempts remain preserved. - [ ] Unsupported, incomplete, unavailable, or uncertain outcomes remain visible. ## Validation performed <!-- List only commands that actually ran, with observed results. Include the relevant real-provider or platform workflow, or explain why it was unavailable. --> - `command` — result ## Compatibility, safety, and release <!-- Call out breaking changes, migrations, package effects, platform/provider limits, security/privacy/containment implications, and meaningful proof gaps. --> - Breaking changes or migration steps: <!-- For ! / BREAKING CHANGE: show a previously valid call/configuration, its new behavior and migration, and why compatibility/deprecation cannot preserve it. Every release increments minor, including breaking changes; keep breaking markers and migration notes so callers can assess compatibility. See docs/releasing.md. --> - Real Hopper/Ghidra, browser, or OS coverage: - Package or release metadata impact: - Security, privacy, process, or containment review: ## Before merge <!-- Draft PRs may leave pending items unchecked. Resolve material scope and authority questions before integration. --> - [ ] This PR addresses a concrete problem or an agreed enhancement. - [ ] Material scope and authority questions are resolved, and any required maintainer scope decision covers the final diff. - [ ] The PR has one focused outcome and the title follows `type(scope): outcome`. - [ ] Related issue is linked, or the reason for not linking one is stated above. - [ ] Tests cover changed observable behavior and meaningful failure paths. - [ ] Owning docs, contracts, and generated metadata are updated where needed. - [ ] User-visible CLI/MCP changes include representative output. - [ ] I checked the final diff for secrets, unrelated cleanup, and unsupported claims. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
bsakaguchi 2026-10-31 01:07:57 +00:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
morluto/rea#5609
No description provided.