dependency-patchL1 Assisted3 more clean outcomes to reach L2. At L1 it a person approves the merge and production.
Rolled back on 2026-10-09 (case #7). That is why it is at L1.
Every fixed case below went through a canary before it reached users. 28 components are checked against OSV, CISA KEV (2026.10.08) and EPSS. Updated 2026-10-13 03:08 UTC.
Each class of change earns its level from its own record. A run of clean outcomes promotes it; one rollback drops it to Assisted. Changes people made in this project's history can earn at most Supervised; Hands-off needs Lockkeeper's own clean outcomes.
dependency-patchL1 Assisted3 more clean outcomes to reach L2. At L1 it a person approves the merge and production.
Rolled back on 2026-10-09 (case #7). That is why it is at L1.
dependency-minorL3 Hands-offAt its ceiling, L3. At L3 it ships through the canary alone; people are told.
dependency-majorL2 SupervisedAt its ceiling, L2. At L2 it merges on its own; a person approves production.
code-changeL2 SupervisedAt its ceiling, L2. At L2 it merges on its own; a person approves production.
soupsieve2.8.4 → 2.9.02 advisoriesroutineurllib32.7.0 → 2.8.03 advisorieshighpyjwt2.13.0 → 2.15.014 advisorieshighdjango6.0.7 → 6.0.82 advisorieshighlockkeeper-20261009-dd2fd7c8