 Chris Bookholt
|
25100c0c7c
|
test(core): require absolute PowerShell wrapper authority
|
2026-07-03 16:16:45 -07:00 |
|
|
Chris Bookholt
|
db3b880cbf
|
Merge PR #31019 follow-ups into model shell policy
# Conflicts:
# codex-rs/core/src/exec_policy.rs
|
2026-07-03 15:55:13 -07:00 |
|
|
Chris Bookholt
|
1fd1c9b417
|
Merge PR #30990 follow-ups into PowerShell policy
|
2026-07-03 15:36:24 -07:00 |
|
|
Chris Bookholt
|
24f63bcaa6
|
Merge PR #30983 follow-ups into namespace exec policy
|
2026-07-03 15:35:47 -07:00 |
|
|
Chris Bookholt
|
c13157bbf5
|
Merge PR #30976 follow-up into one-shot approvals
|
2026-07-03 15:35:22 -07:00 |
|
|
Chris Bookholt
|
2aac4aa37f
|
test(core): cover sandbox retry callback identity
|
2026-07-03 15:35:15 -07:00 |
|
|
Chris Bookholt
|
38c70e2df1
|
fix(core): harden model-selected shell policy identity
|
2026-07-03 15:34:28 -07:00 |
|
|
Chris Bookholt
|
06bed09452
|
Merge PR #30969 follow-up into approval purpose
|
2026-07-03 15:19:40 -07:00 |
|
|
Chris Bookholt
|
f13cd9685f
|
Merge PR #30963 follow-up into repeated approval clients
|
2026-07-03 15:19:08 -07:00 |
|
|
Chris Bookholt
|
73e7bbfd73
|
Merge PR #30628 follow-up into approval integrity
|
2026-07-03 15:18:40 -07:00 |
|
|
Chris Bookholt
|
7a02f212e9
|
fix(core): require authority without filesystem containment
|
2026-07-03 15:15:55 -07:00 |
|
|
Chris Bookholt
|
e32f317912
|
fix(execpolicy): preserve restrictive namespace rules
|
2026-07-03 15:11:37 -07:00 |
|
|
Chris Bookholt
|
729c31bcf4
|
fix(core): require exact outer argv authority
|
2026-07-03 14:59:58 -07:00 |
|
|
Chris Bookholt
|
e294be0be7
|
Merge commit '1b7971db15e13a68da3fecdc8e5cda38bc6271fd' into bookholt/bugb-17231-approval-override
|
2026-07-03 11:49:50 -07:00 |
|
|
Chris Bookholt
|
1b7971db15
|
Merge commit '22e9d5ff64c6c0be7563f15227d875ca097f2984' into bookholt/psec-4922-powershell-one-shot-policy
|
2026-07-03 11:49:30 -07:00 |
|
|
Chris Bookholt
|
22e9d5ff64
|
Merge commit 'e2c95101bcb0bcf7390954b7f0fbb7188214631b' into bookholt/psec-4922-namespace-safe-execpolicy-published
|
2026-07-03 11:49:10 -07:00 |
|
|
Chris Bookholt
|
e2c95101bc
|
Merge commit 'f9c6f4acfad76b152ef88326d503e6ce6f7516b1' into bookholt/psec-4922-one-shot-approval-lifecycle-published
|
2026-07-03 11:48:47 -07:00 |
|
|
Chris Bookholt
|
f9c6f4acfa
|
Merge commit 'e3c97a97ae19b1da1662fccc37178bb22fdac1cd' into bookholt/psec-4922-explicit-approval-purpose
|
2026-07-03 11:48:24 -07:00 |
|
|
Chris Bookholt
|
e3c97a97ae
|
Merge commit 'a0eb300e647051b2fecf3954e6df2a7187d5f0ba' into bookholt/psec-4922-repeated-approval-client-integrity
|
2026-07-03 11:48:03 -07:00 |
|
|
Chris Bookholt
|
a0eb300e64
|
Merge commit '13a5b13880195b1b43906b4577b5b1fa656fda9c' into bookholt/psec-4922-approval-integrity
|
2026-07-03 11:47:43 -07:00 |
|
|
Chris Bookholt
|
13a5b13880
|
Fix Windows compaction shell fixtures
|
2026-07-03 11:36:37 -07:00 |
|
|
Chris Bookholt
|
b4317f4cc7
|
Fix native Windows policy fixtures
|
2026-07-03 10:38:38 -07:00 |
|
|
Chris Bookholt
|
387e083154
|
Use read-only remote cwd predicate
|
2026-07-03 10:03:43 -07:00 |
|
|
Chris Bookholt
|
5dff637b0c
|
Fix Wine remote shell fixtures
|
2026-07-03 09:50:23 -07:00 |
|
|
Chris Bookholt
|
cb648e6876
|
Fix cross-platform shell approval fixtures
|
2026-07-03 09:27:44 -07:00 |
|
|
Chris Bookholt
|
fbd4ac4a4d
|
Harden model-selected shell approval boundaries
|
2026-07-03 09:04:38 -07:00 |
|
|
Chris Bookholt
|
e791609b0f
|
Merge PSEC-4922 approval hardening
|
2026-07-03 07:27:54 -07:00 |
|
|
Chris Bookholt
|
1c37924e39
|
test: remove redundant approval wait loop
|
2026-07-03 06:13:07 -07:00 |
|
|
Chris Bookholt
|
2d13f93d85
|
test: follow PowerShell approval abort lifecycle
|
2026-07-03 06:02:40 -07:00 |
|
|
Chris Bookholt
|
485ecf740f
|
test: assert requested PowerShell argv
|
2026-07-03 05:37:49 -07:00 |
|
|
Chris Bookholt
|
8f03e96cf7
|
Fix Windows policy test redundant clones
|
2026-07-03 05:13:09 -07:00 |
|
|
Chris Bookholt
|
42a055cc3b
|
Restore one-shot policy for inspected PowerShell wrappers
|
2026-07-03 04:50:10 -07:00 |
|
|
Chris Bookholt
|
0a8f5f1e26
|
Merge PR #30983 one-shot approval lifecycle layer
|
2026-07-03 03:23:54 -07:00 |
|
|
Chris Bookholt
|
7f7fd528a6
|
Merge PR #30976 approval purpose layer
|
2026-07-03 02:49:07 -07:00 |
|
|
Chris Bookholt
|
5337f1087e
|
Merge commit '627ece53833650a86257e08d9a2ea935fc3e8d97' into bookholt/psec-4922-explicit-approval-purpose
|
2026-07-03 02:06:55 -07:00 |
|
|
Chris Bookholt
|
4dc7747cc3
|
Merge final repeated-approval parent
|
2026-07-03 02:06:51 -07:00 |
|
|
Chris Bookholt
|
627ece5383
|
Fix TUI argument comment lint
|
2026-07-03 02:01:44 -07:00 |
|
|
Chris Bookholt
|
8c9c1ea9fe
|
Harden TUI app-server request correlation
|
2026-07-03 01:37:58 -07:00 |
|
|
Chris Bookholt
|
e7a5490858
|
Merge commit 'ee10594f6cea193c6eb3530b80454a6f298c44f5' into bookholt/psec-4922-repeated-approval-client-integrity
|
2026-07-03 00:05:17 -07:00 |
|
|
Chris Bookholt
|
ee10594f6c
|
Merge commit '20be6f275ee88225a4974687e07e4d5210e5de4d' into bookholt/psec-4922-approval-integrity
|
2026-07-02 23:50:47 -07:00 |
|
|
Chris Bookholt
|
416a3672e4
|
Merge one-shot approval lifecycle parent
|
2026-07-02 23:29:47 -07:00 |
|
|
Chris Bookholt
|
924589da6e
|
Harden namespace host mapping aliases
|
2026-07-02 23:29:35 -07:00 |
|
|
Chris Bookholt
|
498ca9ee04
|
fix(core): bound interim one-shot dead-code expectation
|
2026-07-02 22:41:16 -07:00 |
|
|
Chris Bookholt
|
45e2d1c252
|
Harden namespace-aware executable policy matching
|
2026-07-02 22:24:55 -07:00 |
|
|
Chris Bookholt
|
20be6f275e
|
fix(shell-command): satisfy Windows and argument lint
|
2026-07-02 22:18:23 -07:00 |
|
|
Chris Bookholt
|
00e7179f00
|
Bind retry approvals to fresh callback authority
|
2026-07-02 22:02:53 -07:00 |
|
|
Chris Bookholt
|
19cd2cb97c
|
Harden one-shot command approval retries
|
2026-07-02 22:02:34 -07:00 |
|
|
Chris Bookholt
|
91798e6206
|
fix(shell-command): reject assembly-qualified parser input
|
2026-07-02 21:54:03 -07:00 |
|
|
Chris Bookholt
|
7697208282
|
fix(shell-command): harden PowerShell policy parsing
|
2026-07-02 21:42:31 -07:00 |
|
|
Chris Bookholt
|
8a241c6ef8
|
Merge corrected repeated-approval parent
# Conflicts:
# codex-rs/analytics/src/reducer.rs
|
2026-07-02 20:57:08 -07:00 |
|