WeiCHEN 45c21ef96e fix(workspace): compare realpaths when enforcing artifact roots ...

macOS TempDir resolves /var to /private/var; EvalSymlinks the data root
before Rel so fencing writes are not false path-escape failures.

2026-09-22 21:42:58 +08:00

..

capability_test.go

feat(workspace): add WorkspaceRef fencing and hide physical paths

2026-09-14 15:59:14 +00:00

capability.go

fix(workspace): compare realpaths when enforcing artifact roots

2026-09-22 21:42:58 +08:00

cleanup_test.go

feat(workspace): gate cleanup on verified receipts

2026-09-15 02:06:10 +00:00

cleanup.go

feat(workspace): gate cleanup on verified receipts

2026-09-15 02:06:10 +00:00

dir_deliverable.go

feat(arch): clear G1 U3/U4 sql_write and path exceptions

2026-09-22 21:40:12 +08:00

keys.go

feat(workspace): gate cleanup on verified receipts

2026-09-15 02:06:10 +00:00

lease_test.go

feat(workspace): add WorkspaceRef fencing and hide physical paths

2026-09-14 15:59:14 +00:00

lease.go

feat(workspace): add WorkspaceRef fencing and hide physical paths

2026-09-14 15:59:14 +00:00

resolver_test.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00

resolver.go

feat(workspace): add WorkspaceRef fencing and hide physical paths

2026-09-14 15:59:14 +00:00

types.go

feat(workspace): add WorkspaceRef fencing and hide physical paths

2026-09-14 15:59:14 +00:00