fix(security): harden private-reporting audit evidence I/O - #524

Merged

seonghobae merged 21 commits into

mainfrom

fix/private-vulnerability-reporting-cancel-liveness

Sep 1, 2026

Commits on Aug 31, 2026

test(security): expose stalled audit response cancellation
seonghobae
committed
ed7835c
fix(security): keep audit size failure independent of stream cleanup
seonghobae
committed
6518945
test(security): reject unsafe private-reporting evidence paths
seonghobae
committed
039ed54
fix(security): bind private-reporting evidence to safe filesystem authority
seonghobae
committed
95e24e0
merge: incorporate protected main into private-reporting hardening
seonghobae
committed
e7947f1
test(security): preserve retained-report source authority
seonghobae
committed
e9caeae
merge: converge private reporting audit with protected main
seonghobae
committed
05ff000
docs(changelog): record private-reporting hardening
seonghobae
committed
d94b796

Commits on Sep 1, 2026