Transaction-Science/open-standards
Watch
1
0
Fork
You've already forked open-standards
 0
Code Issues Pull requests Projects Releases 15 Packages Wiki Activity Actions
open-standards/.github/workflows
History
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Transaction Science 4ec3d5fa6f wai key: the keychain path against the real security tool, in a scratch keychain 
A macOS test drives /usr/bin/security through Keychain::with_tool and a wrapper
that names a scratch keychain on every command it passes on: an item kept, read
back, replaced through -U and removed, no secret on any process argument, exit
44 read as none. It removes the scratch keychain in every case, a failure
included, and holds the search list and the default keychain to what they were.
It never names the login keychain, and needs no dialog.

What the real tool does that the stand-in did not: security -i exits with the
status of a command that failed in it, where the stand-in always exited 0. add
now reports that status and what the tool said, with any secret removed from
it, rather than reading it as "holds another secret". The stand-in does the same
now.

wai-key-keychain.yml runs this test alone on the macOS runner, for a pull
request whose own diff changes dx/key.rs or the workflow.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-11-05 11:35:25 -05:00
..
conformance.yml CI: the gate that decides whether a workflow runs was queued behind the work it gates 2026-11-03 15:19:13 -05:00
energy-hardware.yml wip: registry, SPEC, CHANGELOG, CI jobs, reader tests, settle and generic machine description 2026-10-22 13:49:49 -04:00
joule-code-conformance.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
joule-moq-remote.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
joule-moq-room.yml wai/toolchain-fixes, converted to the layout of the fix: no shared append point 2026-11-05 01:45:34 -05:00
joule-moq-web.yml Merge #493 (wai/messaging-calls @01f3aac1): wai.live.message and wai.live.call, conversations and calls on live rooms 2026-10-26 12:23:34 -04:00
jouleclaw-fabrics.yml CI: two macOS legs depended on runner state the pin change cleared or never had 2026-11-03 17:42:20 -05:00
jouleclaw-public-surface-documented.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
repo-checks.yml Changelog entries and the conformance workflow's lists move into files a change adds 2026-11-05 01:41:29 -05:00
standards-build.yml jouleclaw-energy: a Mac's whole-machine power from the SMC (EnergyDomain::System, ModelBased) 2026-11-04 20:00:04 -05:00
wai-app.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-audit.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-breaking.yml Merge pull request 'Wave A: public-name check, WebAssembly determinism in CI, decode-path reporting, and pin by default' (#616) from wai/wave-a into main 2026-11-04 20:25:41 -05:00
wai-byte-equality.yml wai-byte-equality: restore the windows-x86_64 leg, with pwsh forms of the disk steps 2026-11-05 07:21:05 -05:00
wai-catalogue.yml wai --version, wai docs search and wai registry show, and what a version of the toolchain promises 2026-11-05 11:17:20 -05:00
wai-conformance.yml wai/toolchain-fixes, converted to the layout of the fix: no shared append point 2026-11-05 01:45:34 -05:00
wai-energy-receipts.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-examples.yml wai/toolchain-fixes, converted to the layout of the fix: no shared append point 2026-11-05 01:45:34 -05:00
wai-fleet.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-formal-verification.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-fuzz.yml wai: coverage-guided fuzzing of the reader, and the container reservations it found 2026-10-14 10:58:29 -04:00
wai-http.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-jpegai-e2e.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-key-keychain.yml wai key: the keychain path against the real security tool, in a scratch keychain 2026-11-05 11:35:25 -05:00
wai-key-proxy.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-ledger.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-neural-e2e.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-neural-gates.yml wai-neural-gates: the jpegai-decode-path job installs the repository's Rust pin 2026-11-05 07:21:05 -05:00
wai-ops-differential.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-ops-gpu.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-ops-npu.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-ops.yml Merge pull request 'Wave A: public-name check, WebAssembly determinism in CI, decode-path reporting, and pin by default' (#616) from wai/wave-a into main 2026-11-04 20:25:41 -05:00
wai-pack.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-cli-release.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-cli.yml Merge pull request 'Wave A: public-name check, WebAssembly determinism in CI, decode-path reporting, and pin by default' (#616) from wai/wave-a into main 2026-11-04 20:25:41 -05:00
wai-quantum-contract.yml wai-quantum-contract.yml: the baselines are the versions just published 2026-11-04 19:27:50 -05:00
wai-quantum-cuda.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-dataflow.yml CI: the gate that decides whether a workflow runs was queued behind the work it gates 2026-11-03 15:19:13 -05:00
wai-quantum-desktop-release.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-docs.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-dsp.yml CI: the gate that decides whether a workflow runs was queued behind the work it gates 2026-11-03 15:19:13 -05:00
wai-quantum-editors.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-estimate.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-formats.yml Merge pull request 'Wave A: public-name check, WebAssembly determinism in CI, decode-path reporting, and pin by default' (#616) from wai/wave-a into main 2026-11-04 20:25:41 -05:00
wai-quantum-fpga.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-hip.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-js-release.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-js.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-lang.yml Merge pull request 'Wave A: public-name check, WebAssembly determinism in CI, decode-path reporting, and pin by default' (#616) from wai/wave-a into main 2026-11-04 20:25:41 -05:00
wai-quantum-metal.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-npu-cores.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-npu.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-opencl.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-processors.yml ci: run each suite for what can affect it; re-runs after a merge become nightly 2026-10-19 02:49:11 -04:00
wai-quantum-pulse.yml Merge pull request 'Wave A: public-name check, WebAssembly determinism in CI, decode-path reporting, and pin by default' (#616) from wai/wave-a into main 2026-11-04 20:25:41 -05:00
wai-quantum-py-release.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-py.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-qec.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-qpu.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-registry.yml Merge pull request 'Wave A: public-name check, WebAssembly determinism in CI, decode-path reporting, and pin by default' (#616) from wai/wave-a into main 2026-11-04 20:25:41 -05:00
wai-quantum-service.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-sme.yml CI: the gate that decides whether a workflow runs was queued behind the work it gates 2026-11-03 15:19:13 -05:00
wai-quantum-studio.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-tensor-engine.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-tensor-program.yml CI: the gate that decides whether a workflow runs was queued behind the work it gates 2026-11-03 15:19:13 -05:00
wai-quantum-variational.yml Merge pull request 'Rust: one toolchain, the latest stable' (#606) from chore/rust-latest-stable into main 2026-11-04 14:18:26 -05:00
wai-quantum-vector.yml CI: the gate that decides whether a workflow runs was queued behind the work it gates 2026-11-03 15:19:13 -05:00
wai-quantum-verdict.yml Merge pull request 'Wave A: public-name check, WebAssembly determinism in CI, decode-path reporting, and pin by default' (#616) from wai/wave-a into main 2026-11-04 20:25:41 -05:00
wai-quantum-views.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-quantum-webgpu.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-release.yml wai/toolchain-fixes, converted to the layout of the fix: no shared append point 2026-11-05 01:45:34 -05:00
wai-sink-android.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-sink-swift.yml CI: the gate that decides whether a workflow runs was queued behind the work it gates 2026-11-03 15:19:13 -05:00
wai-sota-vectors.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-studio.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-vector.yml Merge pull request 'Wave A: public-name check, WebAssembly determinism in CI, decode-path reporting, and pin by default' (#616) from wai/wave-a into main 2026-11-04 20:25:41 -05:00
wai-web-reach.yml toolchain: Rust 1.98.0 -> 1.99.1 (change-controlled pin) 2026-11-03 17:42:20 -05:00
wai-web-wasm.yml Merge pull request 'Wave A: public-name check, WebAssembly determinism in CI, decode-path reporting, and pin by default' (#616) from wai/wave-a into main 2026-11-04 20:25:41 -05:00