ShipShadow proof

hisopo/shipshadow

Repository

hisopo/shipshadow

Head SHA

574c9121ce4d95e6a0e908688387803af60b4355

Branch

test

Status

completed

Conclusion

failure

Run

run_0d2b54b96611af7d510373be

Gate Results

Gate	Conclusion	Summary
ShipShadow / Policy Gate	action_required	Protected release paths changed (migrations/0006_account_links.sql, src/config.js, src/gateControl.js, src/gates.js, src/index.js, src/repositoryManifest.js, src/siteshadow.js, src/siteshadowLicense.js, src/theoFpRouting.js, src/verifier/runtime.js, wrangler.toml). Add .shipshadow/release-evidence.md with the verification evidence for this publication.
ShipShadow / Publish Gate	failure	Publication is blocked by: ShipShadow / Secret Gate, ShipShadow / Policy Gate.
ShipShadow / Secret Gate	failure	HIGH env-secret in src/gateControl.js: Potential env-secret secret material HIGH env-secret in src/index.js: Potential env-secret secret material HIGH env-secret in src/siteshadowLicense.js: Potential env-secret secret material
ShipShadow / Security Gate	success	Changed-file content passed the SiteShadow scanner with no findings at or above HIGH. Account-V runtime provenance is not cut over on the bound SiteShadow environment (verified-runtime-provenance-unavailable). Fail-on:high findings were enforced; the exact scanner SHA pin is deferred until SiteShadow emits Account-V-signed provenance.