Repository navigation

Close the SCM init TOCTOU with a modeled create-only write - #10026

Merged

gunbai-bot[bot] merged 24 commits into

mainfrom

scm-init-create-only

Sep 2, 2026

Commits on Sep 1, 2026
- Record the SCM demo CLI rebuild plan and its API inventory
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  868a497
- Host reader and pure outcome map for CliWireResponse
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  9f2c851
- Merge remote-tracking branch 'origin/main' into scm-cli
  gunbc-ci-auto-heal
  committed
  6a71d4c
- Wire CliWireResponse into run_verb: the SCM answer reaches an operator
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  b4dee9f
- Record the working read surface and state its evidence boundary
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  684c0dd
- Make gunbc.scm.cli's own decisions witnessable, and enroll them
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  6afa087
- Merge remote-tracking branch 'origin/main' into scm-cli
  gunbc-ci-auto-heal
  committed
  ead172b
- scm init: the first write verb, and a real round trip
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  a345dca
- Record what add and commit need, including the one design step
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  093348b
- init refuses an occupied path: naming a destructive default did not make it fail-closed
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  1efaf10
- Make scm init proceed only from an established absence, and receipt the wire host Rust
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  0259205
- Integrate main
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  4399b15
Commits on Sep 2, 2026
- Merge remote-tracking branch 'origin/main' into scm-cli
  gunbc-ci-auto-heal
  committed
  0230151
- Regenerate the Rust source-type bindings from their authority
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  76f0551
- The relocation note was prose in a String row, which §4c quarantines
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  1d87dc4
- Admit the entry name, and make the init decision witnessable
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  3096ca1
- A malformed wire response is not "some other type"
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  cda2be3
- The seed-growth receipt undercounted the module I had just added
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  da79cc1
- Close the init TOCTOU with a create-only write, not a better check
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  d9234ff
- Move the create-only rationale to module-item grain, and fix its imports
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  b1f9254
- Merge origin/main into scm-init-create-only, regenerating the projections the driver refused
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  4ab6557
- Merge remote-tracking branch 'origin/main' into scm-init-create-only
  gunbc-ci-auto-heal
  committed
  d758c32
- Merge remote-tracking branch 'origin/main' into scm-init-create-only
  gunbc-ci-auto-heal
  committed
  46aabb2
- Merge remote-tracking branch 'origin/main' into scm-init-create-only
  gunbc-ci-auto-heal
  committed
  3a1d172

Navigation Menu

Repository navigation

Close the SCM init TOCTOU with a modeled create-only write - #10026

Close the SCM init TOCTOU with a modeled create-only write#10026
gunbai-bot[bot] merged 24 commits into
mainfrom
scm-init-create-only

Commits on Sep 1, 2026

Record the SCM demo CLI rebuild plan and its API inventory

Host reader and pure outcome map for CliWireResponse

Merge remote-tracking branch 'origin/main' into scm-cli

Wire CliWireResponse into run_verb: the SCM answer reaches an operator

Record the working read surface and state its evidence boundary

Make gunbc.scm.cli's own decisions witnessable, and enroll them

Merge remote-tracking branch 'origin/main' into scm-cli

scm init: the first write verb, and a real round trip

Record what add and commit need, including the one design step

init refuses an occupied path: naming a destructive default did not make it fail-closed

Make scm init proceed only from an established absence, and receipt the wire host Rust

Integrate main

Commits on Sep 2, 2026

Merge remote-tracking branch 'origin/main' into scm-cli

Regenerate the Rust source-type bindings from their authority

The relocation note was prose in a String row, which §4c quarantines

Admit the entry name, and make the init decision witnessable

A malformed wire response is not "some other type"

The seed-growth receipt undercounted the module I had just added

Close the init TOCTOU with a create-only write, not a better check

Move the create-only rationale to module-item grain, and fix its imports

Merge origin/main into scm-init-create-only, regenerating the projections the driver refused

Merge remote-tracking branch 'origin/main' into scm-init-create-only

Merge remote-tracking branch 'origin/main' into scm-init-create-only

Merge remote-tracking branch 'origin/main' into scm-init-create-only