3 Commits

Include renames

Author	SHA1	Message	Date
Lucas Berger	bb1e97556d	fix(16): fail closed on unparseable audit-waiver expiry date	2026-06-13 08:51:53 -04:00
Lucas Berger	4bb205fe0f	fix(16): CR-01 enforce audit-waiver expiry; IN-01 realpath isMain ... Add isWaived() predicate: a waiver with a past 'expires' date is treated as absent so the High/Critical advisory re-blocks. Applied in both selectBlocking and partitionAdvisories. Add expired-waiver unit tests. isMain now compares fully-resolved real paths (mirrors index.ts).	2026-06-13 08:42:08 -04:00
Lucas Berger	6eb51078e3	feat(16-02): add check-audit.mjs blocking wrapper + unit tests ... - Exports selectBlocking() and partitionAdvisories() as pure functions for unit testing - Main body guarded by import.meta.url check (only runs when invoked directly) - Uses pnpm audit --json (no --audit-level — Pitfall 1 honored) - Exits 1 on unwaived High/Critical; exits 0 with advisory report on moderate/low - All 5 unit tests pass (node --test)	2026-06-13 05:18:19 -04:00