Repository navigation

AB#3757505 Improve vulnerability triage fixability gates and reporting, Fixes AB#3757505 - #469

Merged

Cesar Acosta (cacosta33) merged 37 commits into

masterfrom

cesaracosta/update-skills

Sep 16, 2026

Merged

AB#3757505 Improve vulnerability triage fixability gates and reporting, Fixes AB#3757505#469
Cesar Acosta (cacosta33) merged 37 commits into
masterfrom
cesaracosta/update-skills

Commits on Jun 12, 2026
- Add vuln-triage-reporter skill for MSRC/ITD security triage, Fixes AB#3654306
  Cesar Acosta
  committed
  ec28079
- Enhance Android auth investigation skills with telemetry and defect-surface guidance, Fixes AB#3654306
  Cesar Acosta
  committed
  e966c6c
- Merge branch 'master' into cesaracosta/update-skills
  Cesar Acosta
  committed
  2aa0ec3
Commits on Jun 19, 2026
- Strengthen vuln-triage-reporter rigor, severity mapping, and public-repo safety, Fixes AB#3654306
  Cesar Acosta
  committed
  972bff7
- Improve vuln-triage report rendering: stat tiles, callouts, and roll-up columns, Fixes AB#3654306
  Cesar Acosta
  committed
  c7db18e
- Add machine-readable agent dispatch spec + curate human report, Fixes AB#3654306
  Cesar Acosta
  committed
  cfc2db0
- Add severity-calibration learnings from the 8-ITD triage run, Fixes AB#3654306
  Cesar Acosta
  committed
  e25f8e2
Commits on Jun 22, 2026
- Add Component/Repo tile, tighten intern cutoff, and self-contained master report, Fixes AB#3654306
  Cesar Acosta
  committed
  c6d7a7f
Commits on Jun 23, 2026
- Rework master table + tier-based intern cutoff for vuln-triage-reporter, Fixes AB#3654306
  Cesar Acosta
  committed
  40b2a01
- Enhance vuln-triage on-call report: ext-validation signal, action column, shift workflow, UTF-8 rollup, Fixes AB#3654306
  
  Cesar Acosta
  and
  Copilot
  committed
  6966466
- Refine vuln-triage report: drop redundant Action column, fix table alignment, concise clickable tiles, Fixes AB#3654306
  
  Cesar Acosta
  and
  Copilot
  committed
  ca3b9af
- Add PBI-creation guidance + weekly status report to vuln-triage-reporter, Fixes AB#3654306
  
  Cesar Acosta
  and
  Copilot
  committed
  8f79394
- Make weekly status report a one-command run (auto-discovered map + auto token), Fixes AB#3654306
  
  Cesar Acosta
  and
  Copilot
  committed
  7dc911a
- Drop Owner column from weekly status report (work item already shows assignee), Fixes AB#3654306
  
  Cesar Acosta
  and
  Copilot
  committed
  f3767c7
- Add Requirements hard gate (submodules + MCP) to vuln-triage-reporter, Fixes AB#3654306
  
  Cesar Acosta
  and
  Copilot
  committed
  ca0d1d3
- Add out-of-scope threat boundary (root/physical/debug-only = Won't-Fix) to vuln-triage-reporter, Fixes AB#3654306
  
  Cesar Acosta
  and
  Copilot
  committed
  2155afc
- Genericize IcM number in threat-boundary example (safety check), Fixes AB#3654306
  
  Cesar Acosta
  and
  Copilot
  committed
  7ffbe28
- Add remediation/execution phase to vuln-triage-reporter skill
  
  Cesar Acosta
  and
  Copilot
  committed
  3d799c0
- Document per-repo PR platform & identity model in vuln-triage-reporter
  
  Cesar Acosta
  and
  Copilot
  committed
  b06a37f
- Add cross-session execution tracker convention to vuln-triage-reporter
  
  Cesar Acosta
  and
  Copilot
  committed
  fb364ac
- Close gaps: shift-windowing + manifest dedup, prior-incident lookup, post-report next-actions, Fixes AB#3654306
  
  Cesar Acosta
  and
  Copilot
  committed
  c57d160
- Merge cesaracosta/update-skills into remediation-execution work
  Cesar Acosta
  committed
  a7b0f94
- Weekly status report reads from EXECUTION-TRACKER + adds Out of scope (intern), Fixes AB#3654306
  
  Cesar Acosta
  and
  Copilot
  committed
  6a0ca97
- Add Code-complete ETA + Prod-rollout columns to weekly status report, Fixes AB#3654306
  
  Cesar Acosta
  and
  Copilot
  committed
  02b4f47
Commits on Jun 24, 2026
- Catch "already mitigated upstream" before remediation in vuln-triage-reporter
  
  Cesar Acosta
  and
  Copilot
  committed
  3a78f07
- Make "Already-Covered / Won't-Fix" a first-class category + report section
  
  Cesar Acosta
  and
  Copilot
  committed
  6f43450
- Weekly report: add PR column + "In testing" status; research report: surface drop reason
  
  Cesar Acosta
  and
  Copilot
  committed
  8fbcf4d
- Weekly report: support fixed milestone dates; drop per-row Code-complete column
  
  Cesar Acosta
  and
  Copilot
  committed
  79c67ce
Commits on Jul 10, 2026
- Copilot CLI session 478a05b1-96c0-41d9-b9b9-79dbba9b54ee changes
  Cesar Acosta
  committed
  4a0ca38
Commits on Aug 18, 2026
- vuln-triage-reporter: first-run intake, options-before-fix, and artifact verification
  
  Cesar Acosta
  and
  Copilot
  committed
  97f435f
Commits on Aug 21, 2026
- vuln-triage-reporter: scope contract, claim ledger, and flag ON/OFF fix verification
  
  Cesar Acosta
  and
  Copilot
  committed
  f548261
Commits on Aug 27, 2026
- vuln-triage-reporter: scaffold reports and gate the parser contract
  
  Cesar Acosta
  and
  Copilot
  committed
  f60db48
Commits on Sep 1, 2026
- Merge branch 'master' into cesaracosta/update-skills
  Cesar Acosta
  committed
  0221fa0
Commits on Sep 2, 2026
- vuln-triage-reporter: gate the environment before any investigation
  
  Cesar Acosta
  and
  Copilot
  committed
  7fd0088
Commits on Sep 4, 2026
- vuln-triage-reporter: judge fixability, not just coverage
  
  Cesar Acosta
  and
  Copilot
  committed
  c664209
Commits on Sep 16, 2026
- Address review feedback on MSRC skill
  
  Cesar Acosta (cacosta33)
  and
  Copilot
  committed
  b851072
- Normalize MSRC skill review fixes
  
  Cesar Acosta (cacosta33)
  and
  Copilot
  committed
  401fd7c

Commits

Commits on Jun 12, 2026

Commits on Jun 19, 2026

Commits on Jun 22, 2026

Commits on Jun 23, 2026

Commits on Jun 24, 2026

Commits on Jul 10, 2026

Commits on Aug 18, 2026

Commits on Aug 21, 2026

Commits on Aug 27, 2026

Commits on Sep 1, 2026

Commits on Sep 2, 2026

Commits on Sep 4, 2026

Commits on Sep 16, 2026