feat(audit): pack-conformance auditor + SARIF 2.1.0 emitter#51

Merged

Navi Bot (project-navi-bot) merged 10 commits into

mainfrom

feat/nboot-audit

Apr 27, 2026

Commits on Apr 26, 2026

chore(deps): bump navi-sanitize 0.1.0 -> 0.2.1
Nelson Spence (Fieldnote-Echo)
committed
feat(audit): pack-conformance auditor + SARIF 2.1.0 emitter
Nelson Spence (Fieldnote-Echo)
committed
fix(audit): use canonical manifest pack name (not raw CLI arg) for diff
Nelson Spence (Fieldnote-Echo)
committed
fix(audit): path confinement, distinct exit code, flag-agnostic notice
Nelson Spence (Fieldnote-Echo)
committed
fix(diff): wrap compute_diffs ValueError; drop dead symlink self-compare
Nelson Spence (Fieldnote-Echo)
committed
docs(audit): document __version__ fallback + audit threat model
Nelson Spence (Fieldnote-Echo)
committed
fix(audit): catch ValueError from plan/render in run_audit
Nelson Spence (Fieldnote-Echo)
committed
fix(audit): address Grippy HIGH + Copilot findings on PR #51
Nelson Spence (Fieldnote-Echo)
committed
fix(audit): kind enum validation, monkeypatch fixture, TOCTOU docstring
Nelson Spence (Fieldnote-Echo)
committed

Commits on Apr 27, 2026

fix(audit): newline contract on empty findings, defensive Exception catch
Nelson Spence (Fieldnote-Echo)
committed