weichen
6a3a0dc201
fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)
...
- FIND-SEC-01: GetUserContext requires session ownership (handler 403 +
SQL/memory owner filter); in-memory HTTP + isolated-PG regressions
- FIND-ARCH-01: archtest fails closed on untracked table writes (+noise
exemption) and registers 50 existing writer tables in table_owners
- FIND-SEC-02: Authorizer without pool denies by default; explicit
NewInMemoryAuthorizer seam opt-in via ALLOW_IN_MEMORY at composition
- FIND-SEC-03: swboot commands run argv-exec (no sh -c) with exact
basename allowlist match; prefix-spoof and no-shell-eval tests
- FIND-FLOW-01: confirm rejects validated_only plans; ExecuteClaimed
hard-refuses validated_only steps (new error codes + HTTP mapping)
- FIND-QUAL-01: intentflow.ValidateFlagConsistency fail-fast at Assemble
2026-09-26 02:00:14 +00:00
weichen
83561682eb
feat(swboot): wire SWBOOT-10 controlled patch executor (fail-closed)
...
DB-backed repo_path_allowlist reader (deny-all until admin seeds), per-prefix
admin test_commands (goose 00075), execution evidence table (goose 00074),
isolated git-worktree patch executor with command allowlist/time/output caps
and failure-stops evidence; controlled_patch creation/preview unlocked only
with an allowlisted repo binding (projectworkflow gate + catalog flag);
creator-only server endpoints for bindings/executions; merge/push/deploy stay
behind a typed separate-authorization boundary. Module boundary: app->swboot
composition import registered.
2026-09-26 00:56:59 +00:00
weichen and Cursor
527e6daa99
docs(swboot): mark 00048 tables deferred to SWBOOT-10 (X-3)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-18 04:02:18 +00:00
weichen and Cursor
eee42d1d16
feat(workflow-design): catalog-driven software create wizard and docs_only PI
...
Software projects mount only bootstrap/delivery keys and skip the medical
seven-template clone. SWBOOT-10 stays a fail-closed stub.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-17 04:11:03 +00:00
weichen and Cursor
768729d85e
fix(swboot): drop thin allowlist stub after agent SWBOOT merge
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-16 15:46:57 +00:00
weichen and Cursor
f0029dffed
merge: origin/feature/software-project-bootstrap
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-16 15:46:45 +00:00
weichen and Cursor
f6034fad37
feat(api): SWBOOT-05..08 wizard hooks and SWBOOT-10 allowlist stub
...
Add project-types/compliance catalogs, creation-preview, software create
fields, and fail-closed repo allowlist stub without real patch/merge.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-16 15:43:13 +00:00
weichen and Cursor
2b3302ece4
feat(workflow-design): SWBOOT ADR, project_type migration, patch deny stub
...
SWBOOT-10 remains stub-only pending secondary approval.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-16 15:40:56 +00:00
weichen