Tianyi Cui 27721f9f45 docs(rfc): record real-API e2e CI decision + security model ...

Adds docs/rfc/implemented/2026-06-19-real-api-e2e-ci.md covering the rationale
for running the real-API e2e suite in a separate secret-consuming workflow, the
fork/Dependabot/secret threat model, the residual exposure of the pull_request
trigger, and what changes when the repo goes public. Indexes it in the RFC
README.

Also adds a SECURITY comment on the pull_request trigger forbidding a switch to
pull_request_target (an untrusted-code-with-secrets leak vector, especially once
public), pointing at the RFC.

2026-06-19 18:42:27 +08:00

..

cookbook

Merge remote-tracking branch 'origin/master' into feat/acp-2-bridge

2026-06-18 03:31:04 +08:00

postmortem

fix(acp): address Codex review — strict ctx.get, correct fiber-ownership doc + test

2026-06-18 03:48:33 +08:00

rfc

docs(rfc): record real-API e2e CI decision + security model

2026-06-19 18:42:27 +08:00

AGENTS.md

docs: unify ADR/RFC trees into one lifecycle-organized RFC tree

2026-06-18 02:18:24 +08:00

architecture.md

refactor(agent-loop): rename LoopAgent to ReactLoopAgent

2026-06-19 10:13:33 +08:00

development.md

Merge remote-tracking branch 'origin/master' into feat/acp-snapshot-tests

2026-06-19 10:03:04 +08:00

module-graph.md

feat(acp): tool-owned tool-call UI presentation (title/command/output)

2026-06-18 09:01:36 +08:00