(maka) branch audit/grok-assisted-contributions updated: docs(audit): record live egress verification

[ku...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

likun666661 pushed a commit to branch audit/grok-assisted-contributions
in repository https://gitbox.apache.org/repos/asf/maka.git


The following commit(s) were added to refs/heads/audit/grok-assisted-contributions by this push:
     new 62b125fc13 docs(audit): record live egress verification
62b125fc13 is described below

commit 62b125fc13070fa642b4c9e491f831cceaaef589
Author: likun666661 <90...@users.noreply.github.com>
AuthorDate: Sun Sep 27 16:01:09 2026 +0800

    docs(audit): record live egress verification
---
 docs/grok-assisted-contribution-review.md | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/docs/grok-assisted-contribution-review.md b/docs/grok-assisted-contribution-review.md
index 1b524f6b5d..2dc62f090b 100644
--- a/docs/grok-assisted-contribution-review.md
+++ b/docs/grok-assisted-contribution-review.md
@@ -378,10 +378,10 @@ and the Electron renderer-reload E2E passes in this branch.
   closed. A further ablation showed malformed CONNECT authorities (userinfo
   and path delimiters) and out-of-range ports were still accepted as benign
   destinations. Host/port parsing now rejects those inputs while retaining
-  valid IPv6; Python 3.13 Harbor tests (94 total, 13 skips) passed. A live
-  mitmproxy regression was added but not run locally because the Docker daemon
-  did not respond. #3017 owns the later raw-TCP closure behavior; do not roll
-  that implementation back as part of #3008.
+  valid IPv6; Python 3.13 Harbor tests (96 total, 13 skips) passed. The live
+  mitmproxy regression also passed in PR CI; it remains unavailable locally
+  because the Docker daemon does not respond. #3017 owns the later raw-TCP
+  closure behavior; do not roll that implementation back as part of #3008.
 
 ### Coordinated minimal-core rewrite (September 27, 2026)
 
@@ -391,7 +391,7 @@ current cores; later features that consume those cores remain in place.
 
 | PR | Rewritten current core | Retained boundary |
 |---|---|---|
-| #3008 | CONNECT target normalization is now a pure `(host, port) -> URL` function; the mitmproxy hook only adapts request fields and fails closed. | #3017's raw TCP/TLS layer handling remains authoritative. The live mitmproxy test is still blocked locally because `docker info` does not respond. |
+| #3008 | CONNECT target normalization is now a pure `(host, port) -> URL` function; the mitmproxy hook only adapts request fields and fails closed. | #3017's raw TCP/TLS layer handling remains authoritative. The live mitmproxy test passes in PR CI. |
 | #2967 | Audit writing has one byte encoder and append/truncate path; TypeScript reading has one strict line decoder and one statistics pass. | Trial attribution and scoring semantics remain unchanged. |
 | #3048 | Live seed state is reduced from two generation counters to one generation token plus one readiness bit. | Observation subscription, transcript publication, and later recovery orchestration remain consumers of the state machine. |
 | #3066 | Both direct trials and the process runner now use the same scoped framework context; runner completion restores its caller's context. | Explicit `install` remains only for modules/tests that intentionally bootstrap `relay_agent` outside the runner. |
@@ -430,7 +430,7 @@ reason to restore its old implementation just to revert it again.
 |---|---|---|
 | Deleted or superseded original path (8) | #3063, #3118, #3119, #3102, #3104, #3117, #3069, #3106 | Preserve the current replacement/removal; #3117's fixture and #3106's surviving startup behavior remain separately reviewable. |
 | Mixed or uncertain attribution (2) | #3364, #3123 | Keep Maka-authored formatter and required ASF header; resolve #3123 squash-versus-original provenance with maintainers. |
-| Active code with rewritten current cores (7) | #3008, #2967, #3048, #3066, #3078, #3115, #3544 | Continue ablation at the retained later-dependent boundaries; the #3008 live proxy test still needs Docker. |
+| Active code with rewritten current cores (7) | #3008, #2967, #3048, #3066, #3078, #3115, #3544 | Continue ablation at retained later-dependent boundaries when review exposes a concrete risk; the #3008 live proxy test passes in PR CI. |
 | Active test, fixture, or mixed feature with passing regression only (3) | #3101, #3111, #3459 | #3111 now covers owner release on failed publish; decide whether surviving behavior requires replacement, including the tagged follow-ups in #3459. |
 | Documentation-only mixed-tool PR (1) | #4345 | Factual correction made; maintainers decide provenance remedy for the surviving architecture document. |
 
@@ -462,8 +462,8 @@ acceptability of any remediation need Apache project/legal review.
 - [x] Implement and locally verify #3082, #5223, #3070, and #3099 in reviewable slices.
 - [x] Independently rewrite the current cores retained from #3008, #2967,
       #3048, #3066, #3078, #3115, and #3544 around minimal pure authorities.
-- [ ] Run #3008's live mitmproxy regression when a responsive Docker daemon is
-      available.
+- [x] Run #3008's live mitmproxy regression in PR CI with a responsive Docker
+      daemon.
 - [ ] Continue ablation of later-dependent outer orchestration where review or
       CI exposes a concrete retained risk.
 - [ ] Converge CI and project/ASF legal review on draft PR #5747.


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@maka.apache.org
For additional commands, e-mail: commits-help@maka.apache.org