Highlights
GeoSync v1.1.0 delivers institutional-grade CI hardening, a massive test coverage boost, and community-facing polish to top 1% open-source standard.
What's New
CI Architecture Hardening (#131)
- New
codeql.yml— dedicated SAST workflow (Python/JS/Go) withsecurity-and-qualityquery pack pr-gate.yml— fail-closed jobs (continue-on-error: false), least-privilege permissions, GitHub-nativedependency-review-action, deterministicawkchange detectionsecurity-deep.yml— replaced overlapping Semgrep/CodeQL withgitleaks+trivy-fs(HIGH/CRITICAL, fail-closed)- Full documentation:
BRANCH_PROTECTION_MAIN.md,REQUIRED_CHECKS_MAIN.md,workflows/README.md - All six required checks pass on every PR;
repo-policyenforces 40-char SHA pinning, least-privilege, nopull_request_target
Test Coverage Boost (#130)
- +771 new tests across 37 test files
- Zero mypy errors across all PR files
- Ruff / Black clean
- Covers:
core/indicators/— Kuramoto, entropycore/utils/metrics— Prometheus collectorcore/neuro/— integrated, training, behavioral profiler, ECS regulatorcore/physics/,core/ml/,core/security/,core/compliance/core/data/— feature store, pipeline, backfill, quality control, signal filter, async ingestioncore/events/— sourcingexecution/— live loop, order lifecycle, OMS, risk, portfolio, order ledger, watchdog, circuit breaker, position sizerbacktest/— engine, event-driven, transaction costsanalytics/— irreversibility
- Pre-existing type errors in
core/kuramoto/andcore/physics/cleaned up as a side-effect
Community Polish (#132)
CITATION.cff— CFF v1.2.0, validated withcffconvert. Includes preferred BibTeX citation and 4 seminal references (Strogatz Kuramoto, Ni et al. Ricci, Shannon entropy, Friston free-energy). GitHub renders a one-click citation panel.github/FUNDING.yml— GitHub sponsor button- YAML issue forms — structured bug reports with severity dropdown and feature requests with scope dropdown
.github/CODEOWNERS— exhaustive path-based ownership table (signal layer, execution, data pipelines, backtest, observability, Rust, frontend, tests, docs, CI)- README.md — updated badges (tests 9,759, coverage 82%, CI status), new Citation section with ready-to-copy BibTeX
Metrics
| Metric | v1.0.0 | v1.1.0 |
|---|---|---|
| Tests | 8,687 | 9,759 |
| Test files | ~720 | 758 |
| Required CI checks | 0 | 6 (all fail-closed) |
| Mypy errors in PR scope | — | 0 |
| Lint warnings (ruff) | — | 0 |
| Workflows | 3 | 4 (split CodeQL) |
Upgrading
Nothing to do — this is a build-quality and tooling release. No API changes, no config breaks.
Full Changelog: v1.0.0...v1.1.0