Skip to content

Releases: plwp/fable-meat-proxy

Release list

v0.2.0 — security hardening

v0.2.0 — security hardening Latest
Latest

Choose a tag to compare

View all tags
@plwp plwp released this 29 Jun 00:58
v0.2.0
b1503cb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security-hardening release following a two-pass Codex red-team (#1). On PyPI via Trusted Publishing.

Highlights

  • Reply authentication — each Fable request carries an unguessable 144-bit token (in the email body and Message-ID); a reply is accepted only if it echoes the token, so a forged From: header no longer injects a response.
  • Exact model routing — FABLE_MODELS allowlist (default claude-fable-5) replaces substring matching, so not-fable/…-fable-debug can't divert prompts to the human. (behavior change)
  • No Fable bypass — stream, with_raw_response/with_streaming_response, count_tokens, and the beta messages surface all reject Fable instead of hitting the real API.
  • Secrets — token.json created 0600, symlink-safe (O_NOFOLLOW + fchmod); loose-perm tokens tightened before use.
  • Parsing — attachments skipped; HTML fallback drops comments and hidden text.
  • Prompt-injection note in the outgoing email; FABLE_POLL_INTERVAL floor.

74 offline tests; CI green on Python 3.11–3.13.

Full notes: CHANGELOG · compare v0.1.0...v0.2.0

Assets 2
Loading