From de1033c1ea35d5c0890664cd0a5064447d2ed8ca Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Tue, 26 May 2026 03:18:05 +0000
Subject: [PATCH] chore: triage state update 2026-05-26 (issue #17)

---
 .claude/triage-state.json | 30 ++++++++++++++++++++++++++++--
 1 file changed, 28 insertions(+), 2 deletions(-)

diff --git a/.claude/triage-state.json b/.claude/triage-state.json
index af7517d..4e3b6c3 100644
--- a/.claude/triage-state.json
+++ b/.claude/triage-state.json
@@ -1,6 +1,6 @@
 {
-  "last_run": "2026-05-26T05:18:00Z",
-  "last_commit": "5083c52b64190381eadbb9f0c13b42e52c358a5a",
+  "last_run": "2026-05-26T05:35:00Z",
+  "last_commit": "81f8735d167b597ed7a7a88cc7f89ba0b440b07d",
   "actions": [
     {
       "issue": 4,
@@ -19,6 +19,12 @@
       "action": "B",
       "timestamp": "2026-05-26T05:18:00Z",
       "summary": "User-directed override of 48h skip. Applied priority: high label (kept bug, security). Posted follow-up to existing triage comment with two new points: README.md:63 and src/rules.ts:46 themselves ship the vulnerable policy; proposed base-uri regex rejects valid multi-source restrictions (design choice to surface)."
+    },
+    {
+      "issue": 17,
+      "action": "A",
+      "timestamp": "2026-05-26T05:35:00Z",
+      "summary": "Verified HSTS max-age=0 false-positive at src/rules.ts:21-38: includeSubDomains (+3) and preload (+2) bonuses fire unconditionally, pushing score to 15/20 'good' even during active HSTS revocation. No max-age=0 test exists. Posted substantive comment with early-return fix and RFC/MDN references."
     }
   ],
   "skipped": [
@@ -26,6 +32,26 @@
       "issue": 5,
       "reason": "recently commented (substantive triage comment from BodenMcHale at 2026-05-26T00:35:18Z, ~4h ago, well within 48h skip window)",
       "timestamp": "2026-05-26T04:45:00Z"
+    },
+    {
+      "issue": 7,
+      "reason": "acted on in a previous run (action A at 2026-05-26T05:10:00Z, within 7-day window)",
+      "timestamp": "2026-05-26T05:35:00Z"
+    },
+    {
+      "issue": 4,
+      "reason": "acted on in a previous run (action A at 2026-05-26T04:45:00Z, within 7-day window)",
+      "timestamp": "2026-05-26T05:35:00Z"
+    },
+    {
+      "issue": 16,
+      "reason": "substantive triage comment within 48h (BodenMcHale at 2026-05-26T02:17:47Z)",
+      "timestamp": "2026-05-26T05:35:00Z"
+    },
+    {
+      "issue": 8,
+      "reason": "substantive triage comment within 48h (BodenMcHale at 2026-05-26T01:16:57Z)",
+      "timestamp": "2026-05-26T05:35:00Z"
     }
   ]
 }