[workflow-audit] 3 unexplained change(s) on 2026-09-12

[github-actions]

3 unexplained commit(s) in the audit window (.github/workflows/ .config/tend.yaml .github/audit/ .vscode/) since 2026-09-11T12:09:50Z.

Routine Renovate pin bumps and reproducible tend regenerations are
classified and omitted — see the run summary for what was skipped.
Everything below needs a human to account for it.

13ca270 — Add isolated Hosted accounts with pgstencil Better Auth

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-11 15:56:24 -0700
• Refs: remotes/origin/hosted-auth
• Files:
  • .github/audit/application-security.md
• View diff

1ba83d7 — Add isolated Hosted PR previews and verified production releases

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-11 16:23:26 -0700
• Refs: remotes/origin/hosted-auth
• Files:
  • .github/workflows/hosted-preview.yml
  • .github/workflows/hosted-production.yml
• View diff

fd5181b — Verify the PR merge revision for Hosted previews

• Author: Ned Twigg ned.twigg@diffplug.com (self-declared; not proof of origin)
• Date: 2026-09-11 16:25:16 -0700
• Refs: remotes/origin/hosted-auth
• Files:
  • .github/workflows/hosted-preview.yml
• View diff