2026-10-14T14:52:20.476Z Diffinery runner: job e2e (End-to-end (security)) for codician/diffinery@5594b9dd6196
2026-10-14T14:52:20.493Z Runner: image diffinery-runner:7d76ed7e2bbe8f5431f60bdc, in lhr01, WEUR, container fd311f89e936d25659fe26b2cc53eb2b7f5fc25a4ab4d6be83829ea70361f235
2026-10-14T14:52:20.494Z Workspace: /workspace/diffinery
2026-10-14T14:52:20.587Z ##[group]Run actions/checkout@v4
2026-10-14T14:52:20.587Z ##[endgroup]
2026-10-14T14:52:20.591Z Syncing repository: codician/diffinery
2026-10-14T14:52:20.846Z Fetching the repository (depth 1)
2026-10-14T14:52:21.740Z remote: Enumerating objects: 584, done.        
2026-10-14T14:52:22.169Z Receiving objects:   0% (1/584)
Receiving objects:   1% (6/584)
Receiving objects:   2% (12/584)
Receiving objects:   3% (18/584)
Receiving objects:   4% (24/584)
Receiving objects:   5% (30/584)
Receiving objects:   6% (36/584)
Receiving objects:   7% (41/584)
Receiving objects:   8% (47/584)
Receiving objects:   9% (53/584)
Receiving objects:  10% (59/584)
Receiving objects:  11% (65/584)
Receiving objects:  12% (71/584)
Receiving objects:  13% (76/584)
Receiving objects:  14% (82/584)
Receiving objects:  15% (88/584)
Receiving objects:  16% (94/584)
Receiving objects:  17% (100/584)
Receiving objects:  18% (106/584)
Receiving objects:  19% (111/584)
Receiving objects:  20% (117/584)
Receiving objects:  21% (123/584)
Receiving objects:  22% (129/584)
Receiving objects:  23% (135/584)
Receiving objects:  24% (141/584)
Receiving objects:  25% (146/584)
Receiving objects:  26% (152/584)
Receiving objects:  27% (158/584)
Receiving objects:  28% (164/584)
Receiving objects:  29% (170/584)
Receiving objects:  30% (176/584)
Receiving objects:  31% (182/584)
Receiving objects:  32% (187/584)
Receiving objects:  33% (193/584)
Receiving objects:  34% (199/584)
Receiving objects:  35% (205/584)
Receiving objects:  36% (211/584)
Receiving objects:  37% (217/584)
Receiving objects:  38% (222/584)
Receiving objects:  39% (228/584)
Receiving objects:  40% (234/584)
Receiving objects:  41% (240/584)
Receiving objects:  42% (246/584)
Receiving objects:  43% (252/584)
Receiving objects:  44% (257/584)
Receiving objects:  45% (263/584)
Receiving objects:  46% (269/584)
Receiving objects:  47% (275/584)
Receiving objects:  48% (281/584)
Receiving objects:  49% (287/584)
Receiving objects:  50% (292/584)
Receiving objects:  51% (298/584)
Receiving objects:  52% (304/584)
Receiving objects:  53% (310/584)
Receiving objects:  54% (316/584)
Receiving objects:  55% (322/584)
Receiving objects:  56% (328/584)
Receiving objects:  57% (333/584)
Receiving objects:  58% (339/584)
Receiving objects:  59% (345/584)
Receiving objects:  60% (351/584)
Receiving objects:  61% (357/584)
Receiving objects:  62% (363/584)
Receiving objects:  63% (368/584)
Receiving objects:  64% (374/584)
Receiving objects:  65% (380/584)
Receiving objects:  66% (386/584)
Receiving objects:  67% (392/584)
Receiving objects:  68% (398/584)
Receiving objects:  69% (403/584)
Receiving objects:  70% (409/584)
Receiving objects:  71% (415/584)
Receiving objects:  72% (421/584)
Receiving objects:  73% (427/584)
Receiving objects:  74% (433/584)
Receiving objects:  75% (438/584)
Receiving objects:  76% (444/584)
Receiving objects:  77% (450/584)
Receiving objects:  78% (456/584)
Receiving objects:  79% (462/584)
Receiving objects:  80% (468/584)
Receiving objects:  81% (474/584)
Receiving objects:  82% (479/584)
Receiving objects:  83% (485/584)
Receiving objects:  84% (491/584)
Receiving objects:  85% (497/584)
Receiving objects:  86% (503/584)
Receiving objects:  87% (509/584)
Receiving objects:  88% (514/584)
Receiving objects:  89% (520/584)
Receiving objects:  90% (526/584)
Receiving objects:  91% (532/584)
Receiving objects:  92% (538/584)
Receiving objects:  93% (544/584)
Receiving objects:  94% (549/584)
Receiving objects:  95% (555/584)
Receiving objects:  96% (561/584)
remote: Total 584 (delta 0), reused 584 (delta 0)        
2026-10-14T14:52:22.178Z Receiving objects:  97% (567/584)
Receiving objects:  98% (573/584)
Receiving objects:  99% (579/584)
Receiving objects: 100% (584/584)
Receiving objects: 100% (584/584), 2.38 MiB | 7.01 MiB/s, done.
2026-10-14T14:52:22.216Z From https://diffinery.com/codician/diffinery
2026-10-14T14:52:22.216Z  * [new ref]         5594b9dd61969a269ce5ebbb16582c11f190070b -> origin/main
2026-10-14T14:52:22.431Z Switched to a new branch 'main'
2026-10-14T14:52:22.447Z HEAD is now at 5594b9dd61969a269ce5ebbb16582c11f190070b
2026-10-14T14:52:22.630Z Download action repository 'pnpm/action-setup@v4'
2026-10-14T14:52:23.589Z ##[group]Run pnpm/action-setup@v4
2026-10-14T14:52:23.589Z with:
2026-10-14T14:52:23.589Z   dest: ~/setup-pnpm
2026-10-14T14:52:23.589Z   run_install: null
2026-10-14T14:52:23.589Z   cache: false
2026-10-14T14:52:23.589Z   cache_dependency_path: pnpm-lock.yaml
2026-10-14T14:52:23.589Z   package_json_file: package.json
2026-10-14T14:52:23.589Z   standalone: false
2026-10-14T14:52:23.589Z ##[endgroup]
2026-10-14T14:52:24.040Z ##[group]Running self-installer...
2026-10-14T14:52:25.627Z Progress: resolved 1, reused 0, downloaded 0, added 0
2026-10-14T14:52:25.666Z Packages: +1
2026-10-14T14:52:25.666Z +
2026-10-14T14:52:26.775Z Progress: resolved 1, reused 0, downloaded 1, added 0
2026-10-14T14:52:26.944Z Progress: resolved 1, reused 0, downloaded 1, added 1, done
2026-10-14T14:52:26.991Z 
2026-10-14T14:52:26.991Z dependencies:
2026-10-14T14:52:26.991Z + pnpm 10.28.0 (12.11.2 is available)
2026-10-14T14:52:26.991Z 
2026-10-14T14:52:26.997Z Done in 2.4s
2026-10-14T14:52:27.033Z ##[endgroup]
2026-10-14T14:52:27.034Z Installation Completed!
2026-10-14T14:52:27.716Z ##[group]Run actions/setup-node@v4
2026-10-14T14:52:27.716Z with:
2026-10-14T14:52:27.716Z   node-version: 22
2026-10-14T14:52:27.716Z   cache: pnpm
2026-10-14T14:52:27.716Z ##[endgroup]
2026-10-14T14:52:27.744Z Found in cache @ 22.22.0 (pre-installed node satisfies '22')
2026-10-14T14:52:29.336Z pnpm cache is not found
2026-10-14T14:52:29.436Z ##[group]Run pnpm install --frozen-lockfile
2026-10-14T14:52:29.436Z ##[endgroup]
2026-10-14T14:52:30.922Z Scope: all 7 workspace projects
2026-10-14T14:52:31.378Z Lockfile is up to date, resolution step is skipped
2026-10-14T14:52:32.003Z Progress: resolved 1, reused 0, downloaded 0, added 0
2026-10-14T14:52:32.223Z Packages: +248
2026-10-14T14:52:32.223Z ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
2026-10-14T14:52:33.354Z Progress: resolved 248, reused 0, downloaded 0, added 0
2026-10-14T14:52:34.399Z Progress: resolved 248, reused 0, downloaded 12, added 0
2026-10-14T14:52:35.407Z Progress: resolved 248, reused 0, downloaded 15, added 0
2026-10-14T14:52:36.415Z Progress: resolved 248, reused 0, downloaded 38, added 8
2026-10-14T14:52:37.419Z Progress: resolved 248, reused 0, downloaded 68, added 16
2026-10-14T14:52:38.420Z Progress: resolved 248, reused 0, downloaded 99, added 28
2026-10-14T14:52:39.427Z Progress: resolved 248, reused 0, downloaded 128, added 36
2026-10-14T14:52:40.432Z Progress: resolved 248, reused 0, downloaded 135, added 38
2026-10-14T14:52:41.434Z Progress: resolved 248, reused 0, downloaded 139, added 39
2026-10-14T14:52:42.438Z Progress: resolved 248, reused 0, downloaded 140, added 40
2026-10-14T14:52:44.647Z Progress: resolved 248, reused 0, downloaded 141, added 40
2026-10-14T14:52:45.647Z Progress: resolved 248, reused 0, downloaded 150, added 42
2026-10-14T14:52:46.753Z Progress: resolved 248, reused 0, downloaded 156, added 44
2026-10-14T14:52:47.754Z Progress: resolved 248, reused 0, downloaded 167, added 47
2026-10-14T14:52:48.757Z Progress: resolved 248, reused 0, downloaded 170, added 48
2026-10-14T14:52:51.034Z Progress: resolved 248, reused 0, downloaded 171, added 48
2026-10-14T14:52:53.305Z  WARN  Tarball download average speed 11 KiB/s (size 13 KiB) is below 50 KiB/s: https://registry.npmjs.org/@octokit/endpoint/-/endpoint-11.0.5.tgz (GET)
2026-10-14T14:52:53.355Z Progress: resolved 248, reused 0, downloaded 181, added 51
2026-10-14T14:52:56.512Z Progress: resolved 248, reused 0, downloaded 191, added 54
2026-10-14T14:52:57.521Z Progress: resolved 248, reused 0, downloaded 205, added 58
2026-10-14T14:52:58.780Z Progress: resolved 248, reused 0, downloaded 208, added 59
2026-10-14T14:53:00.364Z Progress: resolved 248, reused 0, downloaded 209, added 59
2026-10-14T14:53:01.427Z Progress: resolved 248, reused 0, downloaded 212, added 62
2026-10-14T14:53:02.450Z Progress: resolved 248, reused 0, downloaded 214, added 62
2026-10-14T14:53:03.475Z Progress: resolved 248, reused 0, downloaded 222, added 65
2026-10-14T14:53:04.484Z Progress: resolved 248, reused 0, downloaded 228, added 66
2026-10-14T14:53:05.620Z Progress: resolved 248, reused 0, downloaded 229, added 66
2026-10-14T14:53:06.668Z Progress: resolved 248, reused 0, downloaded 236, added 68
2026-10-14T14:53:07.673Z Progress: resolved 248, reused 0, downloaded 242, added 140
2026-10-14T14:53:08.673Z Progress: resolved 248, reused 0, downloaded 242, added 168
2026-10-14T14:53:09.188Z Progress: resolved 248, reused 0, downloaded 242, added 248, done
2026-10-14T14:53:09.842Z .../esbuild@0.25.12/node_modules/esbuild postinstall$ node install.js
2026-10-14T14:53:09.846Z .../esbuild@0.28.1/node_modules/esbuild postinstall$ node install.js
2026-10-14T14:53:09.849Z .../node_modules/workerd postinstall$ node install.js
2026-10-14T14:53:09.853Z .../esbuild@0.25.11/node_modules/esbuild postinstall$ node install.js
2026-10-14T14:53:09.854Z .../node_modules/workerd postinstall$ node install.js
2026-10-14T14:53:10.286Z .../esbuild@0.25.12/node_modules/esbuild postinstall: Done
2026-10-14T14:53:10.410Z .../esbuild@0.28.1/node_modules/esbuild postinstall: Done
2026-10-14T14:53:13.262Z .../node_modules/workerd postinstall: Done
2026-10-14T14:53:13.269Z .../esbuild@0.28.2/node_modules/esbuild postinstall$ node install.js
2026-10-14T14:53:15.281Z .../esbuild@0.25.11/node_modules/esbuild postinstall: Done
2026-10-14T14:53:15.502Z .../node_modules/workerd postinstall: Done
2026-10-14T14:53:15.646Z .../esbuild@0.28.2/node_modules/esbuild postinstall: Done
2026-10-14T14:53:17.886Z 
2026-10-14T14:53:17.886Z devDependencies:
2026-10-14T14:53:17.886Z + turbo 2.11.7
2026-10-14T14:53:17.886Z + typescript 5.9.3
2026-10-14T14:53:17.887Z 
2026-10-14T14:53:18.371Z Done in 48.8s using pnpm v10.28.0
2026-10-14T14:53:18.582Z ##[group]Run pnpm -r --if-present build
2026-10-14T14:53:18.582Z ##[endgroup]
2026-10-14T14:53:19.262Z Scope: 6 of 7 workspace projects
2026-10-14T14:53:19.270Z ##[group]@diffinery/cli@0.1.0 : build apps/cli
2026-10-14T14:53:19.274Z 
2026-10-14T14:53:19.274Z > @diffinery/cli@0.1.0 build /workspace/diffinery/apps/cli
2026-10-14T14:53:19.274Z > esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env node
2026-10-14T14:53:19.274Z import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"
2026-10-14T14:53:19.274Z 
2026-10-14T14:53:19.417Z 
2026-10-14T14:53:19.417Z   dist/diffinery.mjs  428.7kb
2026-10-14T14:53:19.417Z 
2026-10-14T14:53:19.417Z ⚡ Done in 122ms
2026-10-14T14:53:19.421Z ##[endgroup]
2026-10-14T14:53:19.421Z ##[group]@diffinery/app@0.1.0 : build apps/diffinery
2026-10-14T14:53:19.423Z 
2026-10-14T14:53:19.423Z > @diffinery/app@0.1.0 build /workspace/diffinery/apps/diffinery
2026-10-14T14:53:19.423Z > node islands/build.mjs && node scripts/build-docs.mjs
2026-10-14T14:53:19.423Z 
2026-10-14T14:53:23.374Z islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KB
2026-10-14T14:53:24.085Z docs: 61 pages (+2 generated at runtime), CLI 0.1.0 (222 KiB)
2026-10-14T14:53:24.104Z ##[endgroup]
2026-10-14T14:53:24.105Z ##[group]@diffinery/runner@0.1.0 : build containers/runner
2026-10-14T14:53:24.106Z 
2026-10-14T14:53:24.106Z > @diffinery/runner@0.1.0 build /workspace/diffinery/containers/runner
2026-10-14T14:53:24.106Z > esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"
2026-10-14T14:53:24.106Z 
2026-10-14T14:53:24.316Z 
2026-10-14T14:53:24.316Z   dist/agent.mjs  657.2kb
2026-10-14T14:53:24.316Z 
2026-10-14T14:53:24.316Z ⚡ Done in 194ms
2026-10-14T14:53:24.321Z ##[endgroup]
2026-10-14T14:53:24.588Z ##[group]Run # Shards of similar length; a new test file runs in "rest" unless it's added to another.
2026-10-14T14:53:24.588Z core='/e2e\.test\.mjs$'
2026-10-14T14:53:24.588Z agents='/(agentic|review|tasks)\.test\.mjs$'
2026-10-14T14:53:24.588Z security='/(security|status)\.test\.mjs$'
2026-10-14T14:53:24.588Z # The core file's real histories and large pushes take minutes each (jquery's alone 2 to 3 on
2026-10-14T14:53:24.588Z # Diffinery's runners): two shards of their own, so no part of the file runs into node's
2026-10-14T14:53:24.588Z # per-file timeout, which is the --test-timeout here.
2026-10-14T14:53:24.588Z histories='^real histories:'
2026-10-14T14:53:24.588Z large='^(large files|large pushes):'
2026-10-14T14:53:24.588Z opts=(--test-timeout=600000)
2026-10-14T14:53:24.588Z case "security" in
2026-10-14T14:53:24.588Z   core) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-skip-pattern="$histories" --test-skip-pattern="$large") ;;
2026-10-14T14:53:24.588Z   histories) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts=(--test-timeout=900000 --test-name-pattern="$histories") ;;
2026-10-14T14:53:24.588Z   large) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-name-pattern="$large") ;;
2026-10-14T14:53:24.588Z   agents) files=$(ls test/e2e/*.test.mjs | grep -E "$agents") ;;
2026-10-14T14:53:24.588Z   security) files=$(ls test/e2e/*.test.mjs | grep -E "$security") ;;
2026-10-14T14:53:24.588Z   *) files=$(ls test/e2e/*.test.mjs | grep -vE "$core|$agents|$security") ;;
2026-10-14T14:53:24.588Z esac
2026-10-14T14:53:24.588Z echo "$files"
2026-10-14T14:53:24.588Z node --test --test-concurrency=1 "${opts[@]}" $files
2026-10-14T14:53:24.589Z ##[endgroup]
2026-10-14T14:53:25.143Z test/e2e/security.test.mjs
2026-10-14T14:53:25.144Z test/e2e/status.test.mjs
2026-10-14T14:53:25.266Z TAP version 13
2026-10-14T14:55:09.370Z # Subtest: security: search, required checks, environments, reviews, locks, archives, drafts and tree names
2026-10-14T14:55:09.373Z ok 1 - security: search, required checks, environments, reviews, locks, archives, drafts and tree names
2026-10-14T14:55:09.374Z   ---
2026-10-14T14:55:09.374Z   duration_ms: 103911.776319
2026-10-14T14:55:09.374Z   type: 'test'
2026-10-14T14:55:09.374Z   ...
2026-10-14T14:55:10.218Z # Subtest: security: organization admins can't hand out ownership
2026-10-14T14:55:10.220Z ok 2 - security: organization admins can't hand out ownership
2026-10-14T14:55:10.220Z   ---
2026-10-14T14:55:10.220Z   duration_ms: 855.242698
2026-10-14T14:55:10.220Z   type: 'test'
2026-10-14T14:55:10.220Z   ...
2026-10-14T14:55:17.614Z # Subtest: security: anonymous writes, token scopes, agent secrets, merge rules and drafts
2026-10-14T14:55:17.620Z ok 3 - security: anonymous writes, token scopes, agent secrets, merge rules and drafts
2026-10-14T14:55:17.651Z   ---
2026-10-14T14:55:17.651Z   duration_ms: 7366.452372
2026-10-14T14:55:17.651Z   type: 'test'
2026-10-14T14:55:17.651Z   ...
2026-10-14T14:55:21.485Z # Subtest: security: push protection covers commits made without git
2026-10-14T14:55:21.485Z ok 4 - security: push protection covers commits made without git
2026-10-14T14:55:21.485Z   ---
2026-10-14T14:55:21.485Z   duration_ms: 3879.8499
2026-10-14T14:55:21.485Z   type: 'test'
2026-10-14T14:55:21.485Z   ...
2026-10-14T14:55:58.261Z # Subtest: security: limited tokens, invisible repositories, readers' labels and the audit trail
2026-10-14T14:55:58.261Z ok 5 - security: limited tokens, invisible repositories, readers' labels and the audit trail
2026-10-14T14:55:58.261Z   ---
2026-10-14T14:55:58.261Z   duration_ms: 36798.806337
2026-10-14T14:55:58.261Z   type: 'test'
2026-10-14T14:55:58.261Z   ...
2026-10-14T14:55:58.546Z # Subtest: security: organization pictures are the owners' to change, and invitations aren't sent twice
2026-10-14T14:55:58.546Z ok 6 - security: organization pictures are the owners' to change, and invitations aren't sent twice
2026-10-14T14:55:58.552Z   ---
2026-10-14T14:55:58.552Z   duration_ms: 281.605944
2026-10-14T14:55:58.552Z   type: 'test'
2026-10-14T14:55:58.552Z   ...
2026-10-14T14:56:00.416Z # Subtest: security: organization members get the base permission, which only owners change
2026-10-14T14:56:00.416Z ok 7 - security: organization members get the base permission, which only owners change
2026-10-14T14:56:00.416Z   ---
2026-10-14T14:56:00.416Z   duration_ms: 1861.993118
2026-10-14T14:56:00.416Z   type: 'test'
2026-10-14T14:56:00.416Z   ...
2026-10-14T14:56:02.713Z # Subtest: security: leaving an organization takes its repository access along
2026-10-14T14:56:02.716Z ok 8 - security: leaving an organization takes its repository access along
2026-10-14T14:56:02.716Z   ---
2026-10-14T14:56:02.716Z   duration_ms: 2305.23634
2026-10-14T14:56:02.716Z   type: 'test'
2026-10-14T14:56:02.716Z   ...
2026-10-14T14:56:15.488Z # Subtest: security: organization settings are checked before anything is saved, and agents see the base permission
2026-10-14T14:56:15.488Z ok 9 - security: organization settings are checked before anything is saved, and agents see the base permission
2026-10-14T14:56:15.490Z   ---
2026-10-14T14:56:15.490Z   duration_ms: 12775.628552
2026-10-14T14:56:15.490Z   type: 'test'
2026-10-14T14:56:15.490Z   ...
2026-10-14T14:56:38.400Z # Subtest: security: a transferred repository keeps its data, and its old name redirects only for readers
2026-10-14T14:56:38.402Z ok 10 - security: a transferred repository keeps its data, and its old name redirects only for readers
2026-10-14T14:56:38.402Z   ---
2026-10-14T14:56:38.402Z   duration_ms: 22909.122174
2026-10-14T14:56:38.402Z   type: 'test'
2026-10-14T14:56:38.402Z   ...
2026-10-14T14:57:18.331Z # Subtest: security: agents land changes on protected branches only through auto-merge a person allowed, gated by CI
2026-10-14T14:57:18.332Z ok 11 - security: agents land changes on protected branches only through auto-merge a person allowed, gated by CI
2026-10-14T14:57:18.333Z   ---
2026-10-14T14:57:18.333Z   duration_ms: 39937.543264
2026-10-14T14:57:18.333Z   type: 'test'
2026-10-14T14:57:18.333Z   ...
2026-10-14T14:57:41.462Z # Subtest: security: an admin can let agents' auto-merges land on green checks without an approval, and nothing more
2026-10-14T14:57:41.467Z ok 12 - security: an admin can let agents' auto-merges land on green checks without an approval, and nothing more
2026-10-14T14:57:41.467Z   ---
2026-10-14T14:57:41.467Z   duration_ms: 23125.164177
2026-10-14T14:57:41.467Z   type: 'test'
2026-10-14T14:57:41.467Z   ...
2026-10-14T14:57:44.183Z # Subtest: security: an archived repository lands nothing by itself: archiving ends auto-merge and empties the merge queue
2026-10-14T14:57:44.187Z ok 13 - security: an archived repository lands nothing by itself: archiving ends auto-merge and empties the merge queue
2026-10-14T14:57:44.187Z   ---
2026-10-14T14:57:44.187Z   duration_ms: 2722.885258
2026-10-14T14:57:44.187Z   type: 'test'
2026-10-14T14:57:44.187Z   ...
2026-10-14T14:57:49.117Z # Subtest: security: landing a pull request deletes its head branch only when asked, through auto-merge and the queue too, and never a protected one
2026-10-14T14:57:49.120Z ok 14 - security: landing a pull request deletes its head branch only when asked, through auto-merge and the queue too, and never a protected one
2026-10-14T14:57:49.126Z   ---
2026-10-14T14:57:49.126Z   duration_ms: 4929.279531
2026-10-14T14:57:49.126Z   type: 'test'
2026-10-14T14:57:49.126Z   ...
2026-10-14T14:57:52.930Z # Subtest: security: agents see what auto-merge needs next to the refusal to merge directly
2026-10-14T14:57:52.942Z ok 15 - security: agents see what auto-merge needs next to the refusal to merge directly
2026-10-14T14:57:52.942Z   ---
2026-10-14T14:57:52.942Z   duration_ms: 3806.442745
2026-10-14T14:57:52.942Z   type: 'test'
2026-10-14T14:57:52.942Z   ...
2026-10-14T14:58:01.101Z # Subtest: security: the queue's bypass button does what it says, and a merge queue can't contradict linear history
2026-10-14T14:58:01.102Z ok 16 - security: the queue's bypass button does what it says, and a merge queue can't contradict linear history
2026-10-14T14:58:01.104Z   ---
2026-10-14T14:58:01.104Z   duration_ms: 8182.988142
2026-10-14T14:58:01.104Z   type: 'test'
2026-10-14T14:58:01.104Z   ...
2026-10-14T14:58:02.394Z # Subtest: security: no token can mint a token, an agent or a sandbox, through the API or the web forms
2026-10-14T14:58:02.396Z ok 17 - security: no token can mint a token, an agent or a sandbox, through the API or the web forms
2026-10-14T14:58:02.396Z   ---
2026-10-14T14:58:02.396Z   duration_ms: 1290.024165
2026-10-14T14:58:02.396Z   type: 'test'
2026-10-14T14:58:02.396Z   ...