Commits

Commits on Sep 29, 2026

Pin the hygiene job to ubuntu-24.04 rather than a moving label

mrhayner
and
claude
committed
d784e25
Pin actions/checkout to a SHA at v7.0.1, and add Dependabot to keep it current

mrhayner
and
claude
committed
1bb6880
Bump actions/checkout to v5 to clear the Node 20 deprecation

mrhayner
and
claude
committed
95e3527

Commits on Sep 28, 2026

Fix the two 5.1-only test failures and the analyzer finding CI surfaced

mrhayner
and
claude
committed
d6ed46d
Fix a workflow file that could never run: matrix context in a step's shell key

mrhayner
and
claude
committed
e6d3d41
README: state the risk the licence only covers in the abstract

mrhayner
and
claude
committed
d993a50
README: say what this is in the words people search for, and answer the real questions

mrhayner
and
claude
committed
fc1b4ee
Keep host/ files LF, so the sourced credentials file cannot gain a carriage return

mrhayner
and
claude
committed
b177fdd
Make the leak gate generic, so it stops publishing what it guards

mrhayner
and
claude
committed
f4ea99c
Match Windows' INI parser on leading whitespace, and cover GPT.INI with real tests

mrhayner
and
claude
committed
94191f8
Handle a UTF-16 GPT.INI, stop a blank line being eaten, bound the CIM calls

mrhayner
and
claude
committed
8ebbe1d
Stop a safety guard from aborting the script it was meant to protect

mrhayner
and
claude
committed
2d44490
Fix a StrictMode throw that broke -LinkToOU outright, and four smaller defects

mrhayner
and
claude
committed
f070708
Warn when another GPO already sets these user rights, and document why

mrhayner
and
claude
committed
32dfa73
Fix a mangled split pattern and error string in the GPO sample
mrhayner
committed
461c782
Simplify the SID resolution to one query instead of a fallback chain
mrhayner
committed
14026ea
Resolve the scan account's SID from Active Directory, not the local name cache
mrhayner
committed
a1ab396
Fix two silent-failure defects in the GPO sample, and harden both logon-rights scripts

mrhayner
and
claude
committed
0c9e835
Add a sample that builds the GPO, not just the per-machine equivalent

mrhayner
and
claude
committed
b2706ae
Document the logon-rights configuration that exists, and add a script for it

mrhayner
and
claude
committed
eb14342
Fix run-order dependence in the redaction tests, and two claims that overstated

mrhayner
and
claude
committed
1445dbe
Mark the scan account sensitive and cannot be delegated

mrhayner
and
claude
committed
b3c2e83
Rewrite the gMSA comparison to argue its actual point

mrhayner
and
claude
committed
7b92103
Fix a crash in the positional redaction rule, and stale prose around it

mrhayner
and
claude
committed
5f5cf8e
Simplify the stderr redaction to what the code can actually produce

mrhayner
and
claude
committed
b161477
Complete the redaction guards, drop development history from the docs

mrhayner
and
claude
committed
aad501d
Correct the test count in Status (75 -> 81)
mrhayner
committed
76b26d9
Record the leak fix and the extra backstop paths in Status
mrhayner
committed
3d2c493
Stop forwarding the shell's own error when .gmp.env fails to source

mrhayner
and
claude
committed
8381efb
Close the credential channel the previous commit opened, and four smaller audit findings

mrhayner
and
claude
committed
920899e
Fix all 23 findings from the final code and documentation review

mrhayner
and
claude
committed
db391af
Update Status to what was actually verified, and to the real test count

mrhayner
and
claude
committed
04a2312
Make the documented exit codes actually reach the scheduler

mrhayner
and
claude
committed
820100f
Fix two exit-code defects the live runs found, and test the contract by executing it

mrhayner
and
claude
committed
a4833fd
Fix the eight findings from the change review

mrhayner
and
claude
committed
419497a