Repository navigation
v4.3.6
Summary
- Fail-closed filesystem boundary checks (lexical + canonical containment, symlink rejection) across runtime I/O, impact, verification, and worktrees.
- Workspace integrity measurement for non-runtime source: digests sealed at final verification and re-checked on COMPLETED.
- Tighter review-package binding, canonical plan authority, and expanded gate/authority tests.
Test plan
-
npm test(437 tests)