v7.2.0 — Security Hardening Batch + Precision Advisory

v7.2.0 — Security Hardening Batch + Precision Advisory

Fail-closed hardening release: security fixes restoring intended behavior, plus one additive capability. No breaking wire changes.

Security hardening

• Expression & math safety (#329, #330, #344, #346) — safe_parse_expr RCE fixes (NFKC normalization bypass, denylist bypass), structural hardening via charset gate and AST allowlist, plus a structural math-output gate with module-indirection blocklist.
• Auth hardening (#333, #334, #345) — pre-auth KDF removed from the lookup path, bcrypt offloaded, /auth/* throttling, brute-force oracle closed.
• Sandbox containment (#335, #338, #339, #351) — module-indirection AST gate bypass closed, container leaks fixed (log rotation, pids_limit, container removal, result size caps), stats sandbox result read-back bounded against host-memory amplification.
• Event-loop safety (#340, #341, #352, #354) — consensus orchestration and stats verification offloaded from the event loop, translator expression smuggling closed, engine-call waits bounded, CircuitBreaker lock made reentrant (#332, #343).
• Metrics & deploy (#337, #349, #350) — all-tenant metrics restricted to explicit platform operators; Prometheus scraping fixed to /metrics/prometheus.
• Supply chain (#355–#361) — scheduled Dependabot version updates across pip/npm/Go/Rust/Docker/Actions; esbuild dev-server CVE overridden past the patched release.

New capability

• Precision advisory (#347, #348) — advisory flag for binary floating-point constants in math/stats verification, emitted as developer_fields.advisory_checks[] with constraint_id: "precision.float-constants".

Dependency modernization

• pip: sympy 1.14, z3-solver 5.x, sqlglot 30.x (#359) · GitHub Actions group (#360) · Python 3.13 → 3.14 base image (#356) · reqwest 0.12 → 0.13 in sdk-rust (#357) · esbuild CVE override (#361).

Semver: minor release — one additive capability plus fail-closed fixes. No breaking wire changes; upgrading from v7.1.0 requires no code changes, but review the security fixes above for deployment impact.