Repository navigation
Conversation
fix(security): patch Zod collection admission and browser dependency
…1024 fix(web): keep frame arrows and swipes inside the carousel
release(web): promote verified marker, security and scene navigation fixes
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Promote the reviewed formal map fixes, Naver SDK readiness guard, dependency security repair, and evidence carousel input ownership fix through the normal data to main protected promotion.
The exact develop source
a2edf2ff9d0fc3bec42ab24bee136470d91fa277is READY in preview deploymentdpl_H4g8j5mC1bR5b7ncwkNYVD4psNng. PC 1440, mobile 390, and tablet 820 each displayed three decoded evidence frames for domestic Ilmi and overseas Wolfgang. Keyboard/horizontal wheel navigation preserves the selected restaurant; the original 24-ArrowRight counterexample now reaches the final frame without navigating restaurants. Native touch boundary regression passed in offline Chrome at all three widths.Preview limitations remain explicit: Naver preview authentication returns 401, so domestic SDK/flame acceptance is reserved for actual production. Preview health returns 503 with runtime evidence naming only missing
TS7_RELEASE_ID; operator secrets and authentication remain unchanged. Production must independently pass health, exact SHA/alias readback, domestic/overseas flame and frame UI checks, 12 asset hashes and 735 public markers before completion. No physical device validation is claimed.Validation: scoped 52 tests / 313 assertions; source CI and CodeQL all jobs succeeded. Current develop checks, including Security, succeeded. The security patch also passed 4,226 full local tests and both npm audits reported zero vulnerabilities. Nightly 39457197351 remains a separate historical failure and was not rerun.
Data promotion #3512 merged as
15392f7e4b983270f776847355fef34df96520a1. Production acceptance remains pending and the current healthy operating deployment is retained as the rollback target until the new operating SHA is independently checked.