weichen 1ec21f1c05 Disable unaudited native tools for project runs ...

Why: Direct search, exec, fetch, and MCP providers could return project-driving results without entering the trusted source observation gate.

Evidence: App and run-manager suites pass with project runs confined to the audited runCtx tool path.

Impact: Non-project native runs retain configured tools; project runs fail closed until native result hooks can prove durable observation.

Refs: TT-N03 TT-R01

2026-10-15 06:33:31 +00:00

..

app

Disable unaudited native tools for project runs

2026-10-15 06:33:31 +00:00

blobstore

Fall back to local artifacts when the blob store is a typed nil

2026-10-13 01:22:57 +00:00

bus

Recover interrupted runs and commit terminal state once

2026-10-03 14:37:49 +00:00

cardsvc

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

cmdbus

Alias the core package consistently

2026-10-15 06:01:32 +00:00

config

Add the team PG tier, atomic migrations and the connection budget (U2)

2026-10-11 03:10:55 +00:00

ctxasm

Add the generative-ui plugin, capability gating, and surface projection

2026-10-11 10:38:15 +00:00

docgen

Generate styled Word deliverables and pin artifact cards in chat

2026-10-01 02:48:49 +00:00

evalgold

Add the public extension surface and platform services

2026-10-01 10:35:02 +00:00

genui

Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery

2026-10-13 06:05:45 +00:00

hostapi

Close the EXT-8 remaining blocks: vector sharing, hostapi face, citation consistency

2026-10-08 17:16:10 +00:00

ingest

Keep tracked-change and hyperlink text in DOCX and add an exec hard switch

2026-10-09 10:36:02 +00:00

intentgate

Wire the intent slow lane behind settings flags (I2 WP3)

2026-10-07 11:20:41 +00:00

intentsem

Wire the intent slow lane behind settings flags (I2 WP3)

2026-10-07 11:20:41 +00:00

pgbus

Catch up event streams by cursor with real reconnect and periodic rescue (U6 slice 1)

2026-10-11 09:30:29 +00:00

plugins

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

profiles

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

projectcontext

Recheck project workflow sources without storing prompts

2026-10-14 05:38:11 +00:00

projectscope

Add project lifecycle delegation and private member work

2026-10-13 08:43:02 +00:00

prompts

Harden OOXML gate against reference-integrity breaks

2026-10-15 02:14:12 +00:00

quality

Keep only hard facts in the blocking gate and add fact-consistency checks

2026-10-10 00:04:57 +00:00

rag

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

ratelimit

Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)

2026-10-11 04:37:50 +00:00

route

Keep only hard facts in the blocking gate and add fact-consistency checks

2026-10-10 00:04:57 +00:00

runmgr

Recheck project sources after clarification

2026-10-15 06:22:20 +00:00

runtime

Recheck project workflow sources without storing prompts

2026-10-14 05:38:11 +00:00

server

Merge current backend main into human decisions

2026-10-15 06:03:03 +00:00

settings

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

skills

Vendor four permissive popular skills into the recipe library

2026-10-14 14:14:36 +00:00

squadadapter

Keep only hard facts in the blocking gate and add fact-consistency checks

2026-10-10 00:04:57 +00:00

store

Register the human decision migration as readable by old binaries

2026-10-15 03:39:15 +00:00

surfacesvc

Fence U3 account writes and stabilize directory cursors

2026-10-14 07:33:54 +00:00

tools

Harden OOXML gate against reference-integrity breaks

2026-10-15 02:14:12 +00:00

wfcompile

Recheck project workflow sources without storing prompts

2026-10-14 05:38:11 +00:00

workflow

Run workflow scripts through a capped callback host

2026-10-01 16:18:59 +00:00