[workflow-audit] 8 unexplained change(s) on 2026-09-23

[github-actions]

8 unexplained commit(s) in the audit window (.github/workflows/ .config/tend.yaml .github/audit/ .vscode/) since 2026-09-22T12:33:14Z.

Routine Renovate pin bumps and reproducible tend regenerations are
classified and omitted — see the run summary for what was skipped.
Everything below needs a human to account for it.

08839cd — Audit a promoted obligation as written, and name UNVERIFIABLE for failed calls

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 22:03:41 -0700
• Refs: remotes/origin/audit-external-obligations
• Files:
  • .github/audit/_preamble.md
• View diff

2ab4ad9 — Key the rule on what no audit run can read, and keep Future for unbuilt work

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 21:41:54 -0700
• Refs: remotes/origin/audit-external-obligations
• Files:
  • .github/audit/_preamble.md
• View diff

52eabbd — Restate the unreadable-condition rule as a list of dispositions

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 21:57:56 -0700
• Refs: remotes/origin/audit-external-obligations
• Files:
  • .github/audit/_preamble.md
• View diff

570e329 — Stage Hosted production activation under Future so it cannot hold the audit inconclusive

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 20:36:38 -0700
• Refs: main,remotes/origin/audit-external-obligations remotes/origin/fix/theme-store-stale-error,remotes/origin/main remotes/origin/renovate/cargo,remotes/origin/tend/update-workflows remotes/origin/ws-autoname-2
• Files:
  • .github/audit/hosted.md
• View diff

b18b675 — Keep the in-repo preflight gate audited; stage only what needs provisioning

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 20:46:24 -0700
• Refs: main,remotes/origin/audit-external-obligations remotes/origin/fix/theme-store-stale-error,remotes/origin/main remotes/origin/renovate/cargo,remotes/origin/tend/update-workflows remotes/origin/ws-autoname-2
• Files:
  • .github/audit/hosted.md
• View diff

b6e248e — Stage external obligations under Future, matching #757

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 21:34:32 -0700
• Refs: remotes/origin/audit-external-obligations
• Files:
  • .github/audit/_preamble.md
• View diff

dd8d9c3 — Name all three dispositions of an unreadable obligation in the preamble

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 21:50:48 -0700
• Refs: remotes/origin/audit-external-obligations
• Files:
  • .github/audit/_preamble.md
  • .github/audit/hosted.md
• View diff

f27c5e1 — Split Hosted accounts into a fourth audit domain

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-22 16:40:38 -0700
• Refs: main,remotes/origin/audit-external-obligations remotes/origin/fix/theme-store-stale-error,remotes/origin/main remotes/origin/renovate/cargo,remotes/origin/tend/update-workflows remotes/origin/ws-autoname-2
• Files:
  • .github/audit/application-security.md
  • .github/audit/hosted.md
  • .github/audit/orchestrator.md
  • .github/workflows/security-audit.yaml
• View diff

[dormouse-bot]

All eight are nedtwigg's own commits on the audit prompts, and they split into three merged and five that only exist on an open PR's branch. Nothing here is unaccounted for; posting the attribution so the issue can be closed.

On main (3) — merged through review:

Commit	PR	Window files
f27c5e1	#746 — Split Hosted accounts into a fourth audit domain	.github/audit/application-security.md, .github/audit/hosted.md, .github/audit/orchestrator.md, .github/workflows/security-audit.yaml
570e329	#757 — Stage Hosted production activation under Future	.github/audit/hosted.md
b18b675	#757	.github/audit/hosted.md

Not on main (5) — all on origin/audit-external-obligations, which is #748, open and under review: b6e248e, 2ab4ad9, dd8d9c3, 52eabbd, 08839cd — each editing .github/audit/_preamble.md alone. The audit reads main, so none of them is in force yet.

The audit window is branch-agnostic by design, so a run of PR commits reads here as a spike; git branch -r --contains separates them. Same shape as #751 and #731.