Repository navigation
specs/functions: reels-loop-generate, content-scripts-generate -- secrets leave the event payload - #8023
Merged
Conversation
…the token stays in the environment Closes #8022
Contributor
This was referenced Oct 9, 2026
Merged
Merged
Merged
This was referenced Oct 9, 2026
Merged
Merged
Merged
Merged
gHashTag
enabled auto-merge (squash)
October 9, 2026 16:54
gHashTag
pushed a commit
that referenced
this pull request
Oct 9, 2026
…loses #8242) specs/functions/content-scripts-generate.t27 conflicted: master (#8023) moved SERVICE to line 49 and extended NOTE. Resolved from master's side: master's card with this branch's appended tests unchanged after it. The tests still pass (t27c test-report 5/5, 0 vacuous; t27b 5/5, 65 runtime asserts). The 9 seals are re-saved with master's t27c 0.5.2 (seal --save, then --verify: all hashes MATCH). The ledger merged cleanly: master's rows and this branch's 9. Closes #8242 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
gHashTag
added a commit
that referenced
this pull request
Oct 9, 2026
#8283) (#8288) Each card held no test block and passed vacuously (0 runtime asserts) under both the reference and t27b. The same tests as #8243 hold each card to the schema of specs/functions/README.md: ID is <domain>-<object>-<verb>; an event function's canonical EVENT names the same three parts as ID and it has no CRON; a cron function has a five-field CRON and no EVENT; the fields come from their vocabularies; SAFE_PROBE agrees with PROBE_RESULT; SERVICE is file:line. With #8243, every function card now carries a test. robokassa-unclaimed-watch and ton-pending-watch have DOMAIN "money", outside the README's vocabulary (see #7911), and skip the DOMAIN test. reels-loop-generate's tests run on the card as #8023 left it. t27c test-report: 4 or 5 tests per card, 0 vacuous. t27b test --check: all pass, 23 to 67 runtime asserts. Sealed with master's t27c 0.5.2 (seal --save, then --verify). docs/reports/t27b_expectations.json: `bless` of scripts/tri_loop/t27b.py over lab run 6c5ad4b with this branch's t27b verdicts for the 9 specs, composed onto master's ledger with only these rows: pass_vacuous -> pass. Closes #8283 Co-authored-by: Claude <claude@anthropic.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
13 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #8022
Plan: 999-multibots-telegraf
docs/audit/inngest-improvement-plan-2026-09-13.mdsection 3 (secrets in events).reels-loop-generateNOTE: delivery bot resolved frombot_namethrough the registry (token in env);bot_tokenhonoured only as a deprecated fallback with a non-printing warning; neither -> NonRetriableError. Sender of the event is outside the repo (not verified whether it sends bot_name). SERVICE 77 -> 106.content-scripts-generateNOTE:openai_api_keyremoved from the schema, zod strips it, key from env in the steps. SERVICE 44 -> 49.docs/now/2026-10-09-the-token-stays-in-the-environment.md.Code: 999-multibots-telegraf branch
secrets-out-of-payloads.