Pinned artifact: abc4d96de8648fae95f778e19c4393cbd9fcd7a6, source commit abc4d96de8648fae95f778e19c4393cbd9fcd7a6.
The install-time hold clears under the current review policy. Pinned npm ci --ignore-scripts and static typecheck/lint/local tests do not fetch or install additional software. 103 lock dependencies all public npm and integrity.
MaKa ACP provider uses existing CLI. SDK provides NDJSON ACP streams, development packages host types/check tooling. Inherited environment and workspace cwd support configured MaKa authentication/permissions.
Exact Git tree is artifact. Tag was independently dereferenced through GitHub annotated tag to exact commit. No plugin, installation or lifecycle code was executed during this static review. No surviving review finding remains. This issue stays open until the matching import and overview PR is ready.
Pinned artifact:
abc4d96de8648fae95f778e19c4393cbd9fcd7a6, source commitabc4d96de8648fae95f778e19c4393cbd9fcd7a6.The install-time hold clears under the current review policy. Pinned npm ci --ignore-scripts and static typecheck/lint/local tests do not fetch or install additional software. 103 lock dependencies all public npm and integrity.
MaKa ACP provider uses existing CLI. SDK provides NDJSON ACP streams, development packages host types/check tooling. Inherited environment and workspace cwd support configured MaKa authentication/permissions.
Exact Git tree is artifact. Tag was independently dereferenced through GitHub annotated tag to exact commit. No plugin, installation or lifecycle code was executed during this static review. No surviving review finding remains. This issue stays open until the matching import and overview PR is ready.