weichen 6a3a0dc201 fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1) ...

- FIND-SEC-01: GetUserContext requires session ownership (handler 403 +
  SQL/memory owner filter); in-memory HTTP + isolated-PG regressions
- FIND-ARCH-01: archtest fails closed on untracked table writes (+noise
  exemption) and registers 50 existing writer tables in table_owners
- FIND-SEC-02: Authorizer without pool denies by default; explicit
  NewInMemoryAuthorizer seam opt-in via ALLOW_IN_MEMORY at composition
- FIND-SEC-03: swboot commands run argv-exec (no sh -c) with exact
  basename allowlist match; prefix-spoof and no-shell-eval tests
- FIND-FLOW-01: confirm rejects validated_only plans; ExecuteClaimed
  hard-refuses validated_only steps (new error codes + HTTP mapping)
- FIND-QUAL-01: intentflow.ValidateFlagConsistency fail-fast at Assemble

2026-09-26 02:00:14 +00:00

..

testdata

feat(intentflow): emit plan facts onto Track E outbox

2026-09-16 00:46:09 +00:00

allowlist.go

feat(intentflow): I2 shadow tier, project allowlist, and rollout metrics

2026-09-23 15:10:26 +00:00

authorize_test.go

feat(intentflow): re-authorize steps before confirm and execute

2026-09-16 01:01:39 +00:00

dispatch_test.go

feat(intent): wire production QueryOwner and confirm dispatcher

2026-09-22 21:44:56 +08:00

dispatch.go

feat(intent): wire production QueryOwner and confirm dispatcher

2026-09-22 21:44:56 +08:00

doc.go

feat(intentflow): persist plans with CAS lease and fencing

2026-09-15 23:43:46 +00:00

emit_test.go

feat(intentflow): emit plan facts onto Track E outbox

2026-09-16 00:46:09 +00:00

emit.go

fix(intentflow): keep plan step receipts durable under PG events

2026-09-16 10:42:20 +00:00

errors.go

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

expansion_test.go

feat(intent-plan): wire U9 PI segment proposer and per-flag U10–U12 evidence

2026-09-17 03:14:57 +00:00

expansion.go

feat(chat): dialogue triggers for comments/reopen/pending-supplements with mistouch guards

2026-09-25 20:14:10 +00:00

flags_test.go

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

flags.go

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

memory.go

feat(intentflow): persist plans with CAS lease and fencing

2026-09-15 23:43:46 +00:00

metrics.go

feat(intentflow): I2 shadow tier, project allowlist, and rollout metrics

2026-09-23 15:10:26 +00:00

mux_test.go

feat(intentflow): route confirmed generate steps through a task adapter

2026-09-16 02:24:23 +00:00

mux.go

feat(intentflow): wire U9–U12 ports and gated OwnerMux

2026-09-16 15:42:49 +00:00

owner.go

feat(intent): wire production QueryOwner and confirm dispatcher

2026-09-22 21:44:56 +08:00

pg_test.go

feat(intentflow): persist plans with CAS lease and fencing

2026-09-15 23:43:46 +00:00

pgsink_advance_test.go

fix(intentflow): keep plan step receipts durable under PG events

2026-09-16 10:42:20 +00:00

plans_test.go

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

plans.go

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

policy_test.go

feat(intentflow): freeze plan lifecycle contracts and batch policy

2026-09-15 16:22:52 +00:00

policy.go

feat(intentflow): per-key live rollout for remaining U9-U12 validated_only keys

2026-09-25 14:38:42 +00:00

projection.go

feat(intentflow): emit plan facts onto Track E outbox

2026-09-16 00:46:09 +00:00

query.go

feat(intentflow): route confirmed generate steps through a task adapter

2026-09-16 02:24:23 +00:00

repository.go

fix(intentflow): keep plan step receipts durable under PG events

2026-09-16 10:42:20 +00:00

service.go

feat(intent): wire production QueryOwner and confirm dispatcher

2026-09-22 21:44:56 +08:00

store.go

feat(intentflow): persist plans with CAS lease and fencing

2026-09-15 23:43:46 +00:00

turn_test.go

feat(intentflow): I2 shadow tier, project allowlist, and rollout metrics

2026-09-23 15:10:26 +00:00

turn_u9_test.go

feat(intentflow): wire U9–U12 live adapters for multi-intent closeout

2026-09-23 15:26:46 +00:00

turn.go

fix(intentflow): bind resource versions for U10/U11 at plan create

2026-09-23 15:44:48 +00:00

types.go

feat(intent): wire production QueryOwner and confirm dispatcher

2026-09-22 21:44:56 +08:00

u9_proposal.go

feat(intentflow): wire U9–U12 live adapters for multi-intent closeout

2026-09-23 15:26:46 +00:00