Publish curated ITWorx_MCP_Hub source from aa72a053975f020a793c88ba18c8d6b93bc9f937

connectors/gitea/server.py

@@ -92,12 +92,18 @@ _PROJECTBRAIN_REQUIRED_PROTECTION_LOCKS = {
 # Original source commit for the ProjectBrain-specific profile lineage.
 _PROJECTBRAIN_VALIDATION_PROFILE_SOURCE_SHA = "57157b1b24d3679018b54970c934fc35d1735df7"
 # SHA-256 of JSON-dumped jobs.full (sort_keys, compact separators), parsed with
-# BaseLoader. It pins the reviewed ProjectBrain workflow copy below.
-# Frozen workflow source and copied fixture raw SHA-256:
+# BaseLoader. These two exact jobs pin the reviewed ProjectBrain workflow copies:
+# the original validation profile and the bounded browser-runner profile.
+# Original frozen workflow source and copied fixture raw SHA-256:
 # 2f78d37ff51f38f0a3b0c9e222eb2dbf83d5108aee3615eb53f2c01283f37f34.
+# Bounded browser fixture raw SHA-256:
+# 6baaf4ceb2e493f90cc8210953a92f8f2c6da723e9c85446f38670efa285d9cc.
 # Refresh only after review.
-_PROJECTBRAIN_VALIDATION_FULL_JOB_DIGEST = (
-    "a3fefb8865f0bd0d4a8c10af79eeb5e22367c5e82e9333a2fe04bdaf97d0193b"
+_PROJECTBRAIN_VALIDATION_FULL_JOB_DIGESTS = frozenset(
+    {
+        "a3fefb8865f0bd0d4a8c10af79eeb5e22367c5e82e9333a2fe04bdaf97d0193b",
+        "d2ee4d6b1c727b6e11286274728783533a293b47f23da81b70bbd052c6e8e11a",
+    }
 )
 _PROJECTBRAIN_VALIDATION_MAX_YAML_CHARS = 200_000
 _PROJECTBRAIN_VALIDATION_MAX_YAML_TOKENS = 10_000
@@ -252,7 +258,7 @@ def _projectbrain_managed_validation_is_strong(workflow_content: str) -> bool:
         ).hexdigest()
     except (RecursionError, TypeError, ValueError):
         return False
-    return full_job_digest == _PROJECTBRAIN_VALIDATION_FULL_JOB_DIGEST
+    return full_job_digest in _PROJECTBRAIN_VALIDATION_FULL_JOB_DIGESTS
 
 
 def _managed_validation_profile(