fix(security): bind analysis paths to filesystem authority - #858

Draft

seonghobae wants to merge 56 commits into

fix/path-authority-boundary-852

Commits on Aug 15, 2026

test(security): define path authority regression contract
seonghobae
committed
db92b8b
fix(security): define filesystem path authority primitives
seonghobae
committed
b62c102
docs(security): record path authority evidence
seonghobae
committed
1bb6002
test(security): cover path authority primitives
seonghobae
committed
4189050
test(security): bind RED contract to path authority helper
seonghobae
committed
2658279
fix(security): enforce analysis filesystem authority
seonghobae
committed
b8258d1
style(path-authority): satisfy Ruff line limits
seonghobae
committed
2344d78
style(path-authority): satisfy Ruff line limits
seonghobae
committed
1240220
test(security): require actionable source path rejection
seonghobae
committed
4eafd7d
fix(path-authority): preserve worker-owned missing-file handling
seonghobae
committed
f4af9b4
test(path-authority): cover native resolution boundaries
seonghobae
committed
2804aef
docs(path-authority): preserve missing-file orchestration contract
seonghobae
committed
7447418
test(path-authority): require actionable job failures
seonghobae
committed
f0fd2dc
fix(path-authority): preflight native request authority
seonghobae
committed
ca79abe
test(path-authority): cover request preflight branches
seonghobae
committed
8b6e74f
test(path-authority): reject file roots before cache IO
seonghobae
committed
ed0b3a3
test(path-authority): enforce writable root type at IO boundary
seonghobae
committed
7863368
fix(path-authority): require writable directory roots
seonghobae
committed
7211cfe
docs(changelog): record filesystem authority hardening
seonghobae
committed
6bffd96
docs(security): define writable root type contract
seonghobae
committed
9be6d69
test(path-authority): cover Win32 filename device aliases
seonghobae
committed
f764d62
fix(path-authority): reject Win32 device and stream aliases
seonghobae
committed
6ba7ac0
docs(security): record Win32 device alias boundary
seonghobae
committed
2761782
test(path-authority): fail foreign-host source before progress
seonghobae
committed
b226b12
fix(security): reject foreign-host paths during request preflight
seonghobae
committed
c0a8ef4
test(security): cover path authority preflight and I/O races
seonghobae
committed
e064f01
test(security): cover path resolution failure branches
seonghobae
committed
eb206d0
docs(security): align path authority evidence with native preflight
seonghobae
committed
7655f6c
test: reject escaping cache file symlinks
seonghobae
committed
3a18ca3
fix: revalidate exact cache file authority
seonghobae
committed
bb2df34
docs: record exact cache link authority
seonghobae
committed
1b81c5d
docs: note cache link hardening
seonghobae
committed
40bb115

Commits on Aug 16, 2026

chore: stage bounded formatter repair
seonghobae
committed
065bbf0
style: format path authority API
github-actions[bot]
committed
7a27b5a
docs: clarify foreign-host path rejection
seonghobae
committed
6133f80
test(path): reject Win32 leading-space normalization
seonghobae
committed
7b89b7e
fix(path): reject Win32 leading-space normalization
seonghobae
committed
8baa5d8
docs(path): record Win32 leading-space normalization
seonghobae
committed
501bb65
docs(changelog): note Win32 normalization hardening
seonghobae
committed
e020e4c
test(security): reject Win32 console device aliases
seonghobae
committed
21c7937
fix(security): reject Win32 console device aliases
seonghobae
committed
432771e
docs(security): cite Win32 console device authority
seonghobae
committed
f423bb4
docs(changelog): record console-device path hardening
seonghobae
committed
ce44b56
test(security): reject mixed Windows namespace prefixes
seonghobae
committed
ba68ed6
fix(security): normalize Windows namespace prefix separators
seonghobae
committed
70e0fbf
docs(security): record mixed Windows namespace boundary
seonghobae
committed
1e8e5ce
docs(changelog): record mixed namespace rejection
seonghobae
committed
bc81d6c
fix(security): authorize stem-work json sidecar before write

cursoragent
and
seonghobae
committed
8a9321d
fix(security): bind stem-work sidecar writes to authorized arrays path

cursoragent
and
seonghobae
committed
30293ac

Commits on Aug 20, 2026

test(security): lock orchestration log privacy
seonghobae
committed
c6287bb
fix(security): redact orchestration failure logs
seonghobae
committed
bf7414d
fix(security): restore API documentation while redacting logs
seonghobae
committed
bedc206

Commits on Aug 28, 2026

merge(develop): refresh path-authority branch
seonghobae
committed
718d9d5
test(api): match redacted stem failure logging
seonghobae
committed
f1f5e87

Commits on Sep 1, 2026