Complete ITOps UI release readiness

[NPFernando]

Summary

• finalize shared UI/UX onboarding, discovery, and safety guidance
• add release evidence automation, dependency checks, and operational rollback guidance
• add catalog integrity and cross-page UI regression coverage

Validation

• make release-evidence
• .venv/bin/python -m pytest -q
• full suite: 60 passed

Production note

Authenticated production smoke verification remains blocked until a logged-in browser session is available. Unauthenticated requests redirect to the deployment login flow and are not treated as production sign-off evidence.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 90721139d3

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Keep spawn for Streamlit worker processes

On Unix deployments this explicitly forks from Streamlit's multithreaded ScriptRunner, so the child can inherit locked synchronization primitives and deadlock or crash, turning valid Text Diff submissions into spurious three-second timeout failures. The repository already documents this exact constraint in utils/regex_tools.py:66-70 and deliberately uses spawn; retain that method here rather than selecting fork for startup speed.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Use valid targets for the incident quick start

The incident card references two identifiers absent from TOOLS: the registered log-tool slug is log_troubleshooting, not log_troubleshooting_assistant, and Roadmap is not registered under roadmap_feedback. Because _resolve_slugs silently skips unknown values after numbering has already occurred, users see only 2. Health Diagnostics and lose steps 1 and 3 from this newly advertised workflow.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Remove stale pre-commit status from the release handoff

Once this commit exists, the assertion that these Home/UI changes are still uncommitted is already false, and the following instructions tell release operators to perform a commit and reconcile branch counts that describe only the author's transient checkout. This makes the committed operations handoff misleading in every clone; record durable verification state or the reviewed commit instead of ephemeral local branch status.

AGENTS.md reference: AGENTS.md:L44-L44

Useful? React with 👍 / 👎.

[NPFernando]

Follow-up audit and hardening pushed in commit dba7578.

• Closed response bodies in webhook/robots adapters to avoid connection leaks.
• Sanitized raw upstream exception text from HTTP, webhook, and robots user-facing error envelopes.
• Added catalog path, alias, and workflow integrity regression contracts.
• Corrected the Streamlit pin documentation and added dependency-maintenance guidance.
• Full suite passes when run in isolation; focused reliability/catalog/a11y gates, Ruff, pip check, and release evidence also pass.

[NPFernando]

Follow-up implementation is pushed in commits 5df4c7f, 2ba3214, and cfe7d28.

• Home search now prioritizes exact/title matches.
• HTTP diagnostics expose sanitized error_code, failure_mode, attempts, and retryable metadata.
• Added maintainer handoff, release notes, dependency follow-up, and refreshed release evidence.
• Added regression coverage for search ranking and adapter diagnostics.
• Hardened the live NVD integration tests to skip only when the external provider is unavailable after bounded retries.

Local release evidence passes, and PR CI plus Socket Security checks pass for the current head. Maintainer review remains required before merge.