Morning demo
static fixture
client island
reproducible demo · no live systems

One synthetic overnight queue, end to end.

Walk the morning the way a Driftlock reviewer does: a ranked queue of 5 pull requests, each linked to the advisory or log line that triggered it. Approve or block each PR independently — the side panel merges every pre-step and every decision into one chronological audit feed, the way your platform team will see it.

01 · Source

Single JSON fixture · no live GitHub / Sigstore / sandbox

02 · Reproducibility

Bit-identical between local reloads

03 · Scope

5 PRs · 1 morning · 1 chronological audit feed

04 · Persistence

None — refresh resets to the fixture

Morning queue

5 pull requests, ranked by readiness

queued 2026-08-04

driftlock/monorepo

dep/dependabot-bump-xml-crypto-6.0.1

ready 4m

CI: green
signed
SBOM ok
revert ok
audit linked

chore(security): pin xml-crypto 6.0.1 + assert idempotency in jwt-verify

Bumps xml-crypto from ^4.1.1 to ^6.0.1 · sandbox run sbx-2026-08-04-03-58-04-z18x

trigger:GHSA-9wfm-mh76-9p92

Reviewer action

Sign off this PR

PR 9f3a71c — decisions are one-shot in this view; reset to record a different outcome.

sha 9f3a71c5 pre-steps · awaiting sign-off

driftlock/monorepo

fix/ci/vitest-flake-timeout-race

ready 9m

CI: green
flaky-test fix
no SBOM

test(ci): widen vitest timeout when forking concurrent workers

Bumps vitest from 2.1.4 to 2.1.9 · sandbox run sbx-2026-08-04-05-02-11-aa02

trigger:log #ln-2187

Reviewer action

Sign off this PR

PR 1c4b0d2 — decisions are one-shot in this view; reset to record a different outcome.

sha 1c4b0d24 pre-steps · awaiting sign-off

driftlock/monorepo

fix/lockfile/pnpm-resolution-drift

ready 14m

CI: green
lockfile
depends on #7421

fix(deps): regenerate pnpm lockfile after resolver drift

Bumps pnpm from 9.12.0 to 9.12.3 · sandbox run sbx-2026-08-04-05-44-30-9c11

trigger:depends on PR #7421

Reviewer action

Sign off this PR

PR 0a73b11 — decisions are one-shot in this view; reset to record a different outcome.

sha 0a73b114 pre-steps · awaiting sign-off

driftlock/k8s-control-plane

deps/sync-k8s-api-v0.31.4

ready 21m

CI: green
signed
SBOM ok

chore(deps): sync k8s.io/api to v0.31.4 (ClusterRole schema bump)

Bumps k8s.io/api from v0.31.2 to v0.31.4 · sandbox run sbx-2026-08-04-06-08-19-de21

trigger:GHSA-h6xx-fxx6-9p9q

Reviewer action

Sign off this PR

PR ff02e34 — decisions are one-shot in this view; reset to record a different outcome.

sha ff02e345 pre-steps · awaiting sign-off

driftlock/proxy-py

sec/urllib3-2.2.3-redirect-handler

ready 27m

CI: yellow
signed
runbook linked

sec(urllib3): pin urllib3 2.2.3 + regression-test redirect handler

Bumps urllib3 from 2.0.7 to 2.2.3 · sandbox run sbx-2026-08-04-07-04-50-bb71

trigger:runbook #rb-urllib3-redirect

Reviewer action

Sign off this PR

PR 7d4ee91 — decisions are one-shot in this view; reset to record a different outcome.

sha 7d4ee915 pre-steps · awaiting sign-off
Decisions are per-PR — approving one branch never disturbs another.