Spaces:

ICSAC-Institute
/

editorial-system

Running

254 kB

Ctrl+K

2 contributors

No author names or real submission events in code, comments, the panel prompt or test fixtures: synthetic names and a synthetic code package; comments describe a submission by month, not by ID

581a0af 10 days ago

crossref-test-probe.sh

2.03 kB
No author names or real submission events in code, comments, the panel prompt or test fixtures: synthetic names and a synthetic code package; comments describe a submission by month, not by ID 10 days ago
smoke_test_test_mode.sh

9.56 kB
Submit signature v2: the signature covers the verified ORCID, name and test-tier headers as well as the body, so a signed request cannot be replayed under another identity or tier; the body-only form is refused on submit unless the deploy-window switch is on; smoke scripts sign v2; regression suite 12 days ago
smoke_test_tier_2.sh

11.2 kB
Submit signature v2: the signature covers the verified ORCID, name and test-tier headers as well as the body, so a signed request cannot be replayed under another identity or tier; the body-only form is refused on submit unless the deploy-window switch is on; smoke scripts sign v2; regression suite 12 days ago
smoke_test_tier_3.sh

3.77 kB
Public-flip preparation 5 months ago
sweep-test-tiers.sh

1.89 kB
Security audit 2026-09-28: verified TLS on the drafts mailbox, no decision on the public status endpoint, inert sponsor SVGs, one download email per purchase, capped DOI downloads, credentials off the command line 13 days ago
test_arxiv_gate.py

13.6 kB
Regression suites sign submit requests with signature v2 12 days ago
test_audit_20260928.py

17.7 kB
Panel quorum counts two models served by the same HF upstream as two reviewers, not one; OpenRouter reviews get room to finish reasoning before the JSON 11 days ago
test_audit_20260928b.py

7.5 kB
Stats count every review on record: the published copies of the reviews from before the public flip, the new score-table heading and the old dimension label; a record in both places counts once 12 days ago
test_audit_20260929.py

12 kB
Curation team wording in the legacy templates and the RQC boilerplate; regression suite for the 2026-09-29 audit 12 days ago
test_audit_20260929b.py

11.7 kB
Reviewer self-identification screen: model or seat named in panel or RQC prose is rewritten to neutral wording, or the sentence is dropped and the curator is told; quotations from the paper pass; regression suite 12 days ago
test_audit_20261001.py

16.2 kB
Before the next submission: a revised version links only under the same verified ORCID; a DOI is dead only when doi.org has no such DOI (an outage or another registration agency is "unchecked", never a finding); the authors' surnames are blinded wherever the panel reads them; the per-reference citation lines sit inside the untrusted submission block and the RQC evidence block is declared untrusted; "unanimous" names the reviewers' shared vote; the code digest fetches at most 60 files in 180 s; a forced re-draft keeps the first decision time and the audit log records a draft, never a send. 10 days ago
test_citation_identity.py

20.6 kB
Before the next submission: a revised version links only under the same verified ORCID; a DOI is dead only when doi.org has no such DOI (an outage or another registration agency is "unchecked", never a finding); the authors' surnames are blinded wherever the panel reads them; the per-reference citation lines sit inside the untrusted submission block and the RQC evidence block is declared untrusted; "unanimous" names the reviewers' shared vote; the code digest fetches at most 60 files in 180 s; a forced re-draft keeps the first decision time and the audit log records a draft, never a send. 10 days ago
test_code_data_link.py

17.3 kB
No author names or real submission events in code, comments, the panel prompt or test fixtures: synthetic names and a synthetic code package; comments describe a submission by month, not by ID 10 days ago
test_consents_at_submission.py

15.3 kB
No submission ids, submitting-author names or personal names in code, comments or fixtures 10 days ago
test_crossref_supplement.py

7.37 kB
Zenodo archive copy of an ICSAC-registered work takes the type of its Crossref record: a Persistence article is a journal article in Persistence with its volume, whatever the form's resource type 12 days ago
test_doi_license.py

8.1 kB
Regression suites sign submit requests with signature v2 12 days ago
test_doi_route.py

7.42 kB
Deposit tests find the relation inside the article: with a journal title DOI, journal_metadata carries its own doi_data first 12 days ago
test_hmac_identity.py

5.55 kB
Submit signature v2: the signature covers the verified ORCID, name and test-tier headers as well as the body, so a signed request cannot be replayed under another identity or tier; the body-only form is refused on submit unless the deploy-window switch is on; smoke scripts sign v2; regression suite 12 days ago
test_panel_retry.py

9.6 kB
Panel: direct free-tier providers (oai| entries), re-queue every tick, scream after 24 hours of waiting for reviewers 13 days ago
test_post_publication.py

19.8 kB
Persistence is the journal of record: journal-article deposits with the open volume; author emails say online first 13 days ago
test_preprint_doi.py

12.2 kB
Regression suites sign submit requests with signature v2 12 days ago
test_publish_gate.py

6.74 kB
Publish gate: the /publications registry, public review and push refuse without the curator's approval; register --live carries it, every other path saves the entry as ready to publish and tells the curator once; no author is told a held paper is live 12 days ago
test_register_resume.py

3.74 kB
Live registration never records a skipped landing page as pushed: it stops with the resume instruction and a re-run resumes at the page step; register-doi.sh names the website checkout; the code/data suite tells founding papers from intake papers 12 days ago
test_rqc_v2.py

7.66 kB
No submission ids, submitting-author names or personal names in code, comments or fixtures 10 days ago
test_zenodo_community.py

5.36 kB
register --live accepts the Institute's own Zenodo community inclusion for the archive copy it publishes; never fatal, reported in the curator ping, retried on a re-run 12 days ago