Martin Vogel c400dc1665 ci: hosted runners cannot enable Defender RTP — revert runner-side gating ...

Dry run 30225685743 failed at the ensure-defender step on every
Windows job: the hosted images policy-lock real-time protection OFF
(WinDefend starts, Set-MpPreference accepts, RTP stays off —
untamperable from the job).

Revert to the pre-gate runner behavior: no ensure-defender step in
runner jobs, the release Defender scan is on-demand and fail-soft
again. The local VM preflight KEEPS the fail-closed Defender-ON gate
(same canonical script) — AV-interaction coverage is a deliberate
local superset where the platform allows it.

The venue-parity contract now enforces the INVERSE for runners
(ensure-defender must not gate hosted jobs) and still requires the VM
preflight gate; VM README documents the verified posture delta.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-07-27 01:56:33 +02:00

..

_build.yml

feat(ci): local-remote parity lanes — artifact-flow smoke, glibc floor, Defender-ON everywhere

2026-07-26 22:37:48 +02:00

_lint.yml

Merge pull request #531 from DeusData/dependabot/github_actions/actions/checkout-7.0.0

2026-07-05 00:31:55 +02:00

_security.yml

build(deps): bump actions/checkout from 6.0.2 to 7.0.0

2026-07-04 17:45:56 +00:00

_smoke.yml

ci: hosted runners cannot enable Defender RTP — revert runner-side gating

2026-07-27 01:56:33 +02:00

_soak.yml

ci: hosted runners cannot enable Defender RTP — revert runner-side gating

2026-07-27 01:56:33 +02:00

_test.yml

ci: hosted runners cannot enable Defender RTP — revert runner-side gating

2026-07-27 01:56:33 +02:00

bug-repro.yml

build(deps): bump actions/checkout from 6.0.2 to 7.0.0

2026-07-04 17:45:56 +00:00

cache-warm.yml

ci: shard the C-suite legs, prove cross-shard coverage, warm compiler caches

2026-07-23 00:53:52 +02:00

codeql.yml

build(deps): bump actions/checkout from 6.0.2 to 7.0.0

2026-07-04 17:45:56 +00:00

dco.yml

build(deps): bump actions/checkout from 6.0.2 to 7.0.0

2026-07-04 17:45:56 +00:00

dry-run.yml

ci: switch PR, dry-run, and release validation to the sharded topology

2026-07-23 00:53:52 +02:00

fast-repro.yml

build(deps): bump actions/checkout from 6.0.2 to 7.0.0

2026-07-04 17:45:56 +00:00

issue-labeler.yml

fix(ci): issue labeler no-oped on every issue — (?i) is invalid in JS RegExp

2026-07-10 00:03:43 +02:00

label-actions.yml

ci: add issue-triage bots (stale, label-actions, area-labeler)

2026-06-24 01:18:29 +02:00

nightly-soak.yml

ci: unify smoke/soak/test venues onto canonical leg entries

2026-07-26 22:23:05 +02:00

pages.yml

build(deps): bump actions/checkout from 6.0.2 to 7.0.0

2026-07-04 17:45:56 +00:00

pr.yml

ci: hosted runners cannot enable Defender RTP — revert runner-side gating

2026-07-27 01:56:33 +02:00

release.yml

ci: unify smoke/soak/test venues onto canonical leg entries

2026-07-26 22:23:05 +02:00

scorecard.yml

Merge pull request #531 from DeusData/dependabot/github_actions/actions/checkout-7.0.0

2026-07-05 00:31:55 +02:00

smoke.yml

build(deps): bump actions/checkout from 6.0.2 to 7.0.0

2026-07-04 17:45:56 +00:00

stale.yml

ci: add issue-triage bots (stale, label-actions, area-labeler)

2026-06-24 01:18:29 +02:00