1 Commits

Author	SHA1	Message	Date
Paul O'Reilly	b7cf256c44	test(invariants): HC-11 forge-credential layers must declare write_targets (xfail until layers are stamped) ... Helper tests/invariants/forge_credentials.py detects credential carriers via mounts[]/env/secrets_required[]/ssh_hosts[]; today gitea-admin, gitea-ssh, gitea-ssh-accelerators, gitea-ssh-homelab are found and none declare write_targets — the invariant xfails(strict) until the CRS-103 rollout stamps them. Claude-Session: https://claude.ai/code/session_018LRh1S2bHJYhEgrMu3UJx8	2026-09-13 13:09:24 +12:00