feat(acp): enforce deterministic agent git commit identity - #6177

Open

wpfleger96 wants to merge 20 commits into

mainfrom

wpfleger/deterministic-agent-commit-identity

Commits on Aug 17, 2026

feat(acp): enforce deterministic agent git commit identity

Duncan
and
wpfleger96
committed
0ebb2a7

Commits on Aug 18, 2026

fix(acp): close push-gate alias/-C bypasses and keyfile teardown race

Duncan
and
wpfleger96
committed
14afcc2
fix(acp): make agent git identity authoritative and fail-closed

Duncan
and
wpfleger96
committed
079a82c
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
fb21fd1
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
f2f6d29
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
38aa021
fix(acp): close review findings on agent commit-identity enforcement

Duncan
and
wpfleger96
committed
db8e45b
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
6e80027

Commits on Aug 19, 2026

fix(git-identity): reject config-introducing git aliases in wrapper

Duncan
and
wpfleger96
committed
f8acf92
fix(git-identity): invert alias guard to an allowlist and refuse all shell aliases

Duncan
and
wpfleger96
committed
7abb86a
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
08715a7
fix(git-identity): hold expanded alias commands to the direct-command policy

Duncan
and
wpfleger96
committed
d963fdb
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
68e9658
fix(git-identity): fail closed at alias resolution limit

Duncan
and
wpfleger96
committed
ac5cdea

Commits on Aug 21, 2026

feat(acp): add BUZZ_GIT_IDENTITY toggle for agent vs user commit identity

Duncan
and
wpfleger96
committed
4cc7339
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
17d50d7
fix(acp): stage canonical key in user mode for the shim credential helper

Duncan
and
wpfleger96
committed
2dfbebc
fix(acp): honor per-agent BUZZ_GIT_IDENTITY over global process env

Duncan
and
wpfleger96
committed
f394b65
Merge remote-tracking branch 'origin/main' into wpfleger/deterministic-agent-commit-identity
Duncan
committed
c44f02a
test(acp): restore BUZZ_GIT_IDENTITY on drop in persona-precedence test

Duncan
and
wpfleger96
committed
c64e62e