Layer · other
Other
Builds that reach beyond the twelve layers.
- Submissions
- 30
- Merged
- 28
fix(dashboard): check a submitted source_url is an http(s) URL again
Flagged by an automated security review of main, and confirmed by hand.
fix(pulse): record a malformed redirect as the answer the server gave
Lower-priority follow-up to the review of merged 00a013b.
fix(evaluator): 0.5.0 binds duplicate delivery to the injected offer and lets only a terminal buyer verdict decide
Follow-up to the review of merged 00a013b. Two of its findings change what the
fix(track): report an application whose acknowledgement was fenced
Follow-up to #264–#277, from the same correctness audit of main at df0b5f1.
fix(coordinator): refuse JSON values the run cannot export
Follow-up to #264–#272, from the same correctness audit of main at df0b5f1.
fix(bundle): read JSON Lines records at LF only
Follow-up to #264–#272, from the same correctness audit of main at df0b5f1.
fix(cli): stop Track processes when the CLI receives SIGTERM
Follow-up to #264–#272, from the same correctness audit of main at df0b5f1.
fix(runner): refuse a Track timeout too short for Town's counterparts
Follow-up to #264–#272, from the same correctness audit of main at df0b5f1.
test(participants): wait for the seller's ack before asserting it
Follow-up to #264–#272, from the same correctness audit of main at df0b5f1.
fix(pulse): refuse a reused --target name
One of nine independent PRs from a correctness audit of main at df0b5f1. Each merges cleanly with the others in any order; together they pass 908 tests locally on Python 3.11 and 3.14 (CI covers 3.11 and 3.12).
fix(path): fail resolution on a malformed local index
One of nine independent PRs from a correctness audit of main at df0b5f1. Each merges cleanly with the others in any order; together they pass 908 tests locally on Python 3.11 and 3.14 (CI covers 3.11 and 3.12).
fix(path): record undecodable terminal output as the subject's
One of nine independent PRs from a correctness audit of main at df0b5f1. Each merges cleanly with the others in any order; together they pass 908 tests locally on Python 3.11 and 3.14 (CI covers 3.11 and 3.12).
fix(runner): wait for an external buyer's verdict before finishing
One of nine independent PRs from a correctness audit of main at df0b5f1. Each merges cleanly with the others in any order; together they pass 908 tests locally on Python 3.11 and 3.14 (CI covers 3.11 and 3.12).
fix(receipt): refuse receipts over bundles that fail verification
One of nine independent PRs from a correctness audit of main at df0b5f1. Each merges cleanly with the others in any order; together they pass 908 tests locally on Python 3.11 and 3.14 (CI covers 3.11 and 3.12).
fix(path): keep the tested endpoint and its rerun exact
One of nine independent PRs from a correctness audit of main at df0b5f1. Each merges cleanly with the others in any order; together they pass 908 tests locally on Python 3.11 and 3.14 (CI covers 3.11 and 3.12).
fix(viewers): safely render evidence and rank only verified bundles
- Render participant-controlled viewer values as inert text, escape the HTML title/script-data boundary, constrain styles, and support the actual Path profile and empty timelines.
fix(packaging): ship runtime assets and verify built distributions
- Regenerate stale exported record schemas and test them against the live models.
fix(imports): preserve pinned snapshots and disclose incomplete imports
- Refuse silent replacement of an on-ramp snapshot and validate the full pinned release reference on an idempotent re-import.
fix(catalog): bound submissions and commit history atomically
- Bound streamed JSON request bodies and individual catalog fields before any database work, with shared validation for the API and submission form.
fix(runner): reject unknown agent override roles
Reject unsupported role keys in both harnesses and external before starting a Track run.
Fix/enforce grant permissions
Merging branch with added visualization.
feat(agent-test): run managed runtimes through Town
A prepared runtime still needs lifecycle-safe orchestration through the shared loopback adapter and Town evaluator without coupling the engine to OpenClaw internals.
feat(agent-test): add a bounded OpenClaw connector
Testing an existing OpenClaw agent needs a bounded connector that checks the behavior Town relies on without locking users to one release or guessing across incompatible routes, retries, or output envelopes.
refactor(agent-test): share the local adapter server
The managed-runtime path needs the same strict authenticated loopback server as the public reference adapter without duplicating or drifting its wire behavior.
Add Agentic Commerce Hackathon page
Adds a page promoting the Agentic Commerce Hackathon (Devfolio, July 31 - Aug 2 2026), where Project NANDA is a partner sponsor.
Nanda Town UI: audience-choice voting, live PR gallery, and site cleanup
Brings the live nandatown.projectnanda.org UI onto the repo. All commits authored by dhve. Changes are confined to apps/nest-dashboard/ (no packages/ or scenarios/ touched), so this composes with the merged hackathon PRs already on main.
[Platform] Hackathon marketplace UI: /hackathon section with submissions, layers, authors
Extends the existing apps/nest-dashboard Next.js 16 app (App Router, React 19, Tailwind 4). Same cream / ink / rust palette, Instrument Serif / Geist Sans / Geist Mono, same paper-texture, eyebrow, btn-primary utilities — no new design…
[Platform] CI hygiene: Makefile, pre-commit, feedback bot, Definition of Done
Closes the gap where hackathon contributors run ruff check + pytest, call that "the tests", and ship PRs that fail CI on ruff format --check and/or pyright.
fix(evaluator): do not pass `correct` on an assertion the run contradicts
…icts
Report: attribute the processed claim to the seller's acknowledgement
Town reads the seller’s recorded acknowledgement but doesn’t observe the seller applying the task. This rewords the processed stage so the report says what the evidence is, and adds a test for it.