docs: sync wiki with guard/leaks SARIF and remote pr inline suppression
docs: sync the wiki with v1.19.0 finding identity, SARIF and openai-compatible
Adds Rule-taxonomy and SARIF pages, links them from the sidebar, and updates the JSON schema, output formats, guard, review, diff, configuration and provider pages.
docs: sync the wiki with the current CLI behavior
Correct command, flag, hook, MCP and config pages against the shipped
CLI, document the fixed pre-push range and MCP min_severity filtering,
and add the missing completion command page to the sidebar.
docs: sync wiki with v1.18.0 and lift archive freeze
Remove the frozen-archive banners from every page (ADR-0042 amendment)
and replace stale facts across the wiki with v1.18.0 reality: default
models (claude-opus-5-5, gemini-3.8-flash, gpt-5.4-mini), the full
10-provider catalog including deepseek/mistral/cohere, setup wizard
behavior (list price + not-measured quality label, Enter selects
default), corrected Gemini cached-input pricing, and illustrative
model IDs in command examples. Strip leftover ADR/OQ references from
prose. Add the upgrade command and OpenAI-compatible provider page to
_Sidebar.md.
docs: freeze wiki as an archive pointing to commitbrief.com/docs
Every page gets a banner linking to its nearest site equivalent; page
bodies, file names and the page set are unchanged. Per ADR-0042 the
wiki is never edited again after this commit.
Document commit-level filters and path denylists
Filtering now has two axes: which commits are reviewed (--author,
--committer, --start-date, --end-date, --text) and which files within
them (the ignore layers, the --file/--dir allowlist, and the new
--exclude-file/--exclude-dir denylist).
Restructure Filtering.md around that split and add the details a user
can only get wrong once: --end-date includes the day named, branch-name
matching is best-effort because a squash merge destroys the association,
and the reviewed diff is a concatenation of per-commit patches so one
file can appear several times.
Also record where the filters do NOT apply and why — `commit` describes
the staged index, `remote pr` reads its diff from `gh` — and note that
`remote pr` now honours --file/--dir on the posting path, not only under
--no-post.
Global-flags, Review, Diff, Summary, Dry-run, Guard, MCP-server,
Commit, Remote-pr, JSON-schema updated to match.
docs: sandbox rerun skips test files the toolchain would not compile
Unsatisfied //go:build constraints, GOOS-suffixed names, and testdata/ files
resolve to no test name — including tags the sandbox_command itself passes,
so -tags=integration in the command does not make a build-tagged file
resolvable. Those tests keep the static finding and skip confirmation.
docs: sandbox-rerun execution boundary and policy sharing (v1.14.0)
Document review.sandbox_command: the argv-list form, the double opt-in
(--sandbox-rerun plus a non-empty command), config set rejection, the
2-minute per-attempt bound, and the stderr notice.
Test-name resolution is Go-only: non-Go files take the skip-and-warn path,
so Python/JS/PHP/Java tests keep full static flaky detection but get no
rerun confirmation. mcp and guard never execute the command at all.
Also explain how to share .commitbrief/policy.yml past the wholesale
.commitbrief/ gitignore, and why baseline.json deliberately stays ignored.
docs: sandbox-rerun flag + config for the flaky detector (v1.12.0)
Document architecture-aware review (archlint architecture.json bridge)
Document signal control, pre-commit hooks, and new flaky detectors
docs: flaky-test detector — config (review.flaky), --no-flaky flag, review command (ADR-0022)
Add new global flags and a provider for OpenAI-compatible APIs
Shrink `COMMITBRIEF.md` via `commitbrief compress` — [Compress command]
Add new documentation files