Skip to content

v4.3.6

Choose a tag to compare

@mohammad154 mohammad154 released this 16 Sep 11:29
· 42 commits to main since this release

Summary

  • Fail-closed filesystem boundary checks (lexical + canonical containment, symlink rejection) across runtime I/O, impact, verification, and worktrees.
  • Workspace integrity measurement for non-runtime source: digests sealed at final verification and re-checked on COMPLETED.
  • Tighter review-package binding, canonical plan authority, and expanded gate/authority tests.

Test plan

  • npm test (437 tests)