Outstanding work only. When an item is done, delete it in the same commit and add a #done entry to docs/updates/ (format and query commands: docs/updates/README.md). No finished items, no history, no rules (rules live in CLAUDE.md).
Item numbers (#n) are never reused. Tags: [DECIDE] needs the owner's decision, [BLOCKED] waits on something else, [UNVERIFIED] observed but not confirmed.
Cross-repo and workspace items live in D:\Codes\progress.md (relevant here: X-12, X-13).
- #15 [BLOCKED: two releases must ship the warning first] Flip the package gate's default to refuse packages outside the allowlist.
- Where: the gate is je_action_core's;
allow_arbitrary_packagesstarts asNone(load, with aDeprecationWarning). Set it toFalseinPackageManager.__init__(je_api_testka/utils/package_manager/package_manager_class.py). The warning branch is in je_action_core's_check_allowedand stays there for the other projects. - Docs to update: the "Package gate" bullet in the three READMEs, the "Package Gate" section of
docs/source/{Eng,Zh}/doc/executor/executor_doc.rst, andarchitecture.md§7. - Timing: the warning is first released in the version after 0.0.145 (
origin/mainpyproject.toml). Flip once two releases after that one have shipped it. - Decide first: how a user who only runs action files (
apitestka run,python -m je_api_testka -e, the socket server) allows a package once there is no Python host to callexecutor.allow_packages(...).
- Where: the gate is je_action_core's;