weichen
6a3a0dc201
fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)
...
- FIND-SEC-01: GetUserContext requires session ownership (handler 403 +
SQL/memory owner filter); in-memory HTTP + isolated-PG regressions
- FIND-ARCH-01: archtest fails closed on untracked table writes (+noise
exemption) and registers 50 existing writer tables in table_owners
- FIND-SEC-02: Authorizer without pool denies by default; explicit
NewInMemoryAuthorizer seam opt-in via ALLOW_IN_MEMORY at composition
- FIND-SEC-03: swboot commands run argv-exec (no sh -c) with exact
basename allowlist match; prefix-spoof and no-shell-eval tests
- FIND-FLOW-01: confirm rejects validated_only plans; ExecuteClaimed
hard-refuses validated_only steps (new error codes + HTTP mapping)
- FIND-QUAL-01: intentflow.ValidateFlagConsistency fail-fast at Assemble
2026-09-26 02:00:14 +00:00
weichen and Cursor
0611b1f24f
feat(intentflow): wire U9–U12 ports and gated OwnerMux
...
Register dry-run adapters via BuildOwnerMux when independent flags are on;
U9 stub fail-closes on malformed/timeout/out-of-bounds without raising PlanTier.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-16 15:42:49 +00:00
weichen and Cursor
da0b3d812b
feat(intentflow): persist plans with CAS lease and fencing
...
Own plan/step/decision writes behind UoW so two workers cannot both execute the same step.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-15 23:43:46 +00:00
weichen and Cursor
9364da4974
feat(intentflow): freeze plan lifecycle contracts and batch policy
...
Add the app/intentflow skeleton so HITL state, error codes, REST shapes, and BatchActionPolicy live outside intent and default to the legacy tier.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-15 16:22:52 +00:00
weichen