feat(sandbox): add quarantined patch validation - #65

Closed

seonghobae wants to merge 136 commits into

mainfrom

feat/quarantined-patch-validation

Commits on Aug 5, 2026

test(sandbox): define quarantined patch validation contract
seonghobae
committed
42c2b67
feat(sandbox): implement quarantined patch validation
seonghobae
committed
2fd5f8b
feat(sandbox): export patch validation API
seonghobae
committed
28b6d58
fix(sandbox): preserve nofollow patch path semantics
seonghobae
committed
8d3f3c9
test(sandbox): close patch validator safety branches
seonghobae
committed
7d1fb3a
fix(sandbox): reject raw backslash patch paths before tokenization
seonghobae
committed
de2bab9
docs(doctoring): record quarantined patch validation boundary
seonghobae
committed
641420b
docs(sandbox): explain quarantined patch validation
seonghobae
committed
86052b5
docs(changelog): record quarantined patch validation
seonghobae
committed
f6a289d
docs(changelog): restore undici release-gate wording
seonghobae
committed
c83fb48
test(sandbox): expose exact-source and patch handoff races
seonghobae
committed
acd9c0b
test(sandbox): expose hidden patch and evidence boundaries
seonghobae
committed
235b7e8
fix(sandbox): close patch metadata and mount injection gaps
seonghobae
committed
76c059e
fix(sandbox): bind exact source and bounded result artifact
seonghobae
committed
be89ea9
test(sandbox): verify safe staging and bounded metadata parsing
seonghobae
committed
b4db02d
test(sandbox): assert private staged patch and output mount
seonghobae
committed
ef87aa3
test(sandbox): reject non-exact source worktrees
seonghobae
committed
8a16a92
docs(sandbox): document staged patch and bounded result evidence
seonghobae
committed
7e61a23
docs(doctoring): bind staged patch and result trust boundaries
seonghobae
committed
b8c17b9
ci: repair PR 65 reviewer coverage test-first
seonghobae
committed
71e885e
chore(ci): remove temporary self-modifying repair workflow
seonghobae
committed
b1b00fa
test(sandbox): reject dirty and unverifiable source snapshots
seonghobae
committed
795b940
fix(sandbox): reject dirty exact-head source snapshots
seonghobae
committed
2f0608b
docs(sandbox): require clean exact-head Git snapshots
seonghobae
committed
5d3da44
docs(doctoring): require clean exact-head source evidence
seonghobae
committed
fe15128
test(sandbox): hide Git credentials from untrusted validation
seonghobae
committed
5045cc4
fix(sandbox): mask Git control metadata from untrusted code
seonghobae
committed
13b33e2
docs(sandbox): document Git metadata credential mask
seonghobae
committed
93fe83d
docs(doctoring): record Git metadata credential mask
seonghobae
committed
6ff8029
ci: reject dirty PR 65 source worktrees
seonghobae
committed
b044062
chore(ci): remove temporary dirty-source repair workflow
seonghobae
committed
f3d42e3
test(sandbox): expose source snapshot race
seonghobae
committed
e531bde
chore(pr65): stage exact-source snapshot repair
seonghobae
committed
0a2dbf5
fix(pr65): make source snapshot repair script executable
seonghobae
committed
d5f6d78
ci(pr65): run exact-source snapshot repair once
seonghobae
committed
2a064be
chore(ci): remove invalid PR repair workflow
seonghobae
committed
2c7a3f8
chore(sandbox): remove temporary PR repair script
seonghobae
committed
c1c3f12
ci(pr65): verify exact-commit source snapshot repair
seonghobae
committed
712125f
chore(ci): remove invalid self-modifying repair workflow
seonghobae
committed
8584d1e
fix(sandbox): mount exact committed source snapshot
seonghobae
committed
e0b9a33
test(sandbox): cover exact source snapshot failures
seonghobae
committed
4643980
docs(sandbox): document exact committed source snapshot
seonghobae
committed
86f9388
docs(doctoring): record exact committed source boundary
seonghobae
committed
816387e
test(sandbox): specify bounded archive extraction
seonghobae
committed
bd64670
test(sandbox): complete archive boundary regressions
seonghobae
committed
841d475
fix(sandbox): bound exact-source archive extraction
seonghobae
committed
ea4786c
docs(sandbox): specify bounded archive extraction
seonghobae
committed
6521891
docs(doctoring): record archive extraction boundary
seonghobae
committed
c884296
test(sandbox): cover archive collision failures
seonghobae
committed
247072f
test(sandbox): isolate exact source from local Git attributes
seonghobae
committed
542867c
test(sandbox): reproduce raw-tree and bounded-output gaps
seonghobae
committed
caa94a0
fix(sandbox): isolate Git control metadata from exact snapshots
seonghobae
committed
004b14f
test(sandbox): cover isolated Git control failure boundaries
seonghobae
committed
ca012c6
test(sandbox): exercise malformed archive after isolated control setup
seonghobae
committed
59e5616
fix(sandbox): bound patch evidence to one host result file
seonghobae
committed
82abd4f
test(sandbox): target the single bounded result-file mount
seonghobae
committed
3cea7ad
test(sandbox): target bounded result file in metadata isolation
seonghobae
committed
299dd78
test(sandbox): verify one bounded result-file channel
seonghobae
committed
4938886
docs(sandbox): document isolated raw Git tree and result file
seonghobae
committed
6d9fd53
docs(doctoring): record isolated Git attribute boundary
seonghobae
committed
ac385ee
docs(changelog): record isolated Git tree and result boundary
seonghobae
committed
cbbf712
docs(doctoring): keep repository citations APA-only
seonghobae
committed
cad5be4
test(sandbox): allow realistic artifacts under fsize cap
seonghobae
committed
cbf749e
fix(sandbox): preserve realistic file writes under bounded validation
seonghobae
committed
b98a263
docs(sandbox): separate workspace and evidence file-size ceilings
seonghobae
committed
5f57f2c
docs(doctoring): separate process and evidence size ceilings
seonghobae
committed
9a200bc
test(sandbox): parse exact result mount boundary
seonghobae
committed
03af3f6
test(sandbox): expose post-hunk path-smuggling boundary
seonghobae
committed
01e8c5e
fix(sandbox): parse unified hunk boundaries before path checks
seonghobae
committed
2c843cf
test(sandbox): cover unified hunk parser boundaries
seonghobae
committed
7b848d0
test(sandbox): bind secondary paths to primary diff identity
seonghobae
committed
be2ba58
fix(sandbox): bind auxiliary paths to counted diff identity
seonghobae
committed
f220803
test(sandbox): reject existing symlink and gitlink index modes
seonghobae
committed
34362d0
test(sandbox): fail closed on provenance and hunk edges
seonghobae
committed
37d8191
docs(changelog): record exact hunk path and mode boundaries
seonghobae
committed
51c6717
ci(sandbox): stage exact validation-contract repair
seonghobae
committed
cf8d0e5
ci(sandbox): run exact validation-contract repair
seonghobae
committed
e92ceea
test(sandbox): forbid untrusted result evidence writes
seonghobae
committed
8e3b020
fix(sandbox): enforce exact provenance and bounded evidence
seonghobae
committed
f327efb
chore(security): remove self-modifying PR repair workflow
seonghobae
committed
920086d
chore(sandbox): remove transient repair mutator
seonghobae
committed
15e951d
test(sandbox): remove superseded host-evidence contract
seonghobae
committed
a99350e
test(sandbox): bound prearchive tree and result channel
seonghobae
committed
2d48b43
test(sandbox): model post-stat result growth
seonghobae
committed
e68e88d
test(sandbox): isolate legacy unit boundaries explicitly
seonghobae
committed
229c2b3
test(sandbox): remove trust-boundary bypass fixtures
seonghobae
committed
740daa5
test(sandbox): modernize runner fixtures without bypasses
seonghobae
committed
9de2da5
test(sandbox): authenticate adversarial runner fixtures
seonghobae
committed
e8294f4
test(sandbox): require canonical repository paths
seonghobae
committed
9b5a6ef
test(sandbox): authenticate direct result-file fixture
seonghobae
committed
a3ce5c6
test(sandbox): model exact-tree preflight in archive fixtures
seonghobae
committed
aad5390
fix(sandbox): validate canonical metadata and exact tree before archive
seonghobae
committed
3ce8041
test(sandbox): bind source-integrity doubles to prearchive tree checks
seonghobae
committed
477f0a7
test(sandbox): close exact-tree and parser branch coverage
seonghobae
committed
5bbe221
test(sandbox): preserve hunk-before-header regression after no-diff gate
seonghobae
committed
471efa3
test(sandbox): cover descriptor sentinel cleanup branch
seonghobae
committed
93b0766
docs(sandbox): align patch validation contract with exact-tree preflight
seonghobae
committed
f676886
docs(doctoring): record exact-tree and single-result evidence rationale
seonghobae
committed
c604f92
test(sandbox): require bounded streaming Git evidence
seonghobae
committed
9febe3c
fix(sandbox): stream hostile Git evidence within hard bounds
seonghobae
committed
c88bd75
test(sandbox): isolate archive fixtures from streaming tree process
seonghobae
committed
3f17418
test(sandbox): model streamed status command failure
seonghobae
committed
2b626da
test(sandbox): model streamed exact-tree process failures
seonghobae
committed
b36c9c3
test(sandbox): cover bounded Git streaming failure branches
seonghobae
committed
5027f64
test(sandbox): close final bounded-stream coverage edges
seonghobae
committed
2680812
docs(sandbox): document bounded Git stream collection
seonghobae
committed
59c726d
docs(doctoring): justify bounded Git evidence streaming
seonghobae
committed
9e03b17
test(sandbox): expose trailing mode token bypass
seonghobae
committed
89b4e5c

Commits on Aug 6, 2026

ci: verify and repair strict mode metadata parsing
seonghobae
committed
0a703e3
chore(workflows): remove invalid self-modifying repair automation
seonghobae
committed
dc65698
fix(reviewer): parse patch mode metadata exactly
seonghobae
committed
609333f
docs(reviewer): document exact mode metadata parsing
seonghobae
committed
31371cc
docs(doctoring): record mode-metadata fail-closed decision
seonghobae
committed
ad7a63c
docs(changelog): record strict mode metadata parsing
seonghobae
committed
0c60dea
docs(changelog): preserve unrelated audit wording
seonghobae
committed
44e3cb8
test(sandbox): require canonical ASCII exact-tree metadata
seonghobae
committed
ae509a7
fix(sandbox): require canonical ASCII exact-tree metadata
seonghobae
committed
36ad5bb
docs(sandbox): specify canonical exact-tree metadata
seonghobae
committed
e6f5b47
docs(doctoring): justify canonical ASCII tree grammar
seonghobae
committed
8f9c802
docs(changelog): record canonical ASCII tree grammar
seonghobae
committed
1e836fa
test(sandbox): preserve canonical git size padding
seonghobae
committed
7c9090e
test(sandbox): define canonical git size padding grammar
seonghobae
committed
df9829a
fix(sandbox): parse canonical git long-size padding
seonghobae
committed
67d57ae
docs(sandbox): document canonical git size padding
seonghobae
committed
1deb46b
docs(doctoring): reconcile git long-size padding grammar
seonghobae
committed
e682978
docs(changelog): reconcile git long-size padding finding
seonghobae
committed
5d63605
test(sandbox): reject borrowed Git object databases
seonghobae
committed
dd5813a
test(sandbox): bind exact tree to archive bytes
seonghobae
committed
757c467
test(sandbox): remove unused archive-binding import
seonghobae
committed
5da28df
fix(sandbox): bind exact Git tree to extracted bytes
seonghobae
committed
a586e18
test(sandbox): cover Git blob identity failure edges
seonghobae
committed
d59159c
test(sandbox): cover absent descriptor cleanup branch
seonghobae
committed
d29abd4
docs: bind patch validation source identity
seonghobae
committed
3e074a9
docs: doctor exact-tree identity boundary
seonghobae
committed
19f038d
docs: record authenticated source contract
seonghobae
committed
552a6dd
docs: preserve unrelated changelog text
seonghobae
committed
5c2e676