weichen 6a3a0dc201 fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1) ...

- FIND-SEC-01: GetUserContext requires session ownership (handler 403 +
  SQL/memory owner filter); in-memory HTTP + isolated-PG regressions
- FIND-ARCH-01: archtest fails closed on untracked table writes (+noise
  exemption) and registers 50 existing writer tables in table_owners
- FIND-SEC-02: Authorizer without pool denies by default; explicit
  NewInMemoryAuthorizer seam opt-in via ALLOW_IN_MEMORY at composition
- FIND-SEC-03: swboot commands run argv-exec (no sh -c) with exact
  basename allowlist match; prefix-spoof and no-shell-eval tests
- FIND-FLOW-01: confirm rejects validated_only plans; ExecuteClaimed
  hard-refuses validated_only steps (new error codes + HTTP mapping)
- FIND-QUAL-01: intentflow.ValidateFlagConsistency fail-fast at Assemble

2026-09-26 02:00:14 +00:00

..

chatflow

fix(chat): restore D3 semantic shadow under reasoning no-tools

2026-09-23 15:13:19 +00:00

docadvance

refactor(docgov): converge shared lifecycle vocab into contracts

2026-09-22 21:44:57 +08:00

docflow

refactor(docgov): converge shared lifecycle vocab into contracts

2026-09-22 21:44:57 +08:00

docnotify

fix(land): 适配 dev 现行结构 — gov()/authorizer() 访问器、去 app/docnotify stream 依赖（arch 基线）、测试 stub 重名

2026-09-25 20:17:20 +00:00

docproject

test(docproject): prove projection shadow, uniqueness, and no-replace

2026-09-15 09:59:55 +00:00

eventsconsumer

feat(dev): single-binary no-docker runtime with managed localpg

2026-09-24 15:53:50 +00:00

fav

feat(events): add FAV subscriber shadow without live writes

2026-09-17 04:25:17 +00:00

intentflow

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

stageflow

feat(bizdev): snapshot collaborators onto Runtime and Server ports

2026-09-15 13:00:33 +00:00

uow

feat(docflow): own document commands in one UnitOfWork

2026-09-14 14:02:21 +00:00

app_test.go

test(events): prove WriterLive off/shadow/live hook matrix

2026-09-15 10:17:26 +00:00

app.go

fix(security): harden bypass authz, gate blind spot, command exec, validated_only (review P0/P1)

2026-09-26 02:00:14 +00:00

author_only_policy_adapter.go

feat(app): wire sysadmin author-only policy into projectinstance

2026-09-17 09:39:59 +00:00

chat_adapters.go

refactor(chat): break chat→app cycle with narrow ports

2026-09-22 21:25:59 +08:00

chat_doc_dialogue.go

feat(chat): dialogue triggers for comments/reopen/pending-supplements with mistouch guards

2026-09-25 20:14:10 +00:00

composition_query_owner_test.go

feat(intent): wire production QueryOwner and confirm dispatcher

2026-09-22 21:44:56 +08:00

docgov_owner_test.go

feat(intentflow): wire U9–U12 live adapters for multi-intent closeout

2026-09-23 15:26:46 +00:00

docgov_owner.go

feat(intentflow): per-key live rollout for remaining U9-U12 validated_only keys

2026-09-25 14:38:42 +00:00

duty_reassign_adapters.go

refactor(docgov): converge shared lifecycle vocab into contracts

2026-09-22 21:44:57 +08:00

instance_duty_adapter_test.go

test: cover duty lock, heal/revoke skip, and instance duty adapter

2026-09-17 09:59:38 +00:00

instance_duty_adapter.go

feat(workflow): namespace task keys without breaking old instances

2026-09-19 10:50:25 +00:00

live_keys_rollout_test.go

feat(intentflow): per-key live rollout for remaining U9-U12 validated_only keys

2026-09-25 14:38:42 +00:00

mutate_owner_test.go

feat(intentflow): wire U9–U12 live adapters for multi-intent closeout

2026-09-23 15:26:46 +00:00

mutate_owner.go

feat(notification): digest aggregates, supplement-impact batch, and free-collab hooks

2026-09-24 11:44:20 +00:00

pi_narrative_test.go

fix(docgov): materialize reasoning narrative under --no-tools

2026-09-23 15:11:22 +00:00

pi_narrative.go

fix(docgov): materialize reasoning narrative under --no-tools

2026-09-23 15:11:22 +00:00

pi_segment_test.go

feat(intent-plan): wire U9 PI segment proposer and per-flag U10–U12 evidence

2026-09-17 03:14:57 +00:00

pi_segment.go

fix(pi-agent): enforce a no-tool reasoning profile

2026-09-20 04:59:15 +00:00

pi_swboot_test.go

feat(workflow-design): catalog-driven software create wizard and docs_only PI

2026-09-17 04:11:03 +00:00

pi_swboot.go

feat(workflow-design): catalog-driven software create wizard and docs_only PI

2026-09-17 04:11:03 +00:00

plan_owner_test.go

feat(intentflow): I2 shadow tier, project allowlist, and rollout metrics

2026-09-23 15:10:26 +00:00

plan_owner.go

feat(intentflow): route confirmed generate steps through a task adapter

2026-09-16 02:24:23 +00:00

project_blackboard_port.go

feat(intentflow): wire U9–U12 live adapters for multi-intent closeout

2026-09-23 15:26:46 +00:00

query_owner_test.go

feat(intentflow): I2 shadow tier, project allowlist, and rollout metrics

2026-09-23 15:10:26 +00:00

query_owner.go

feat(intent): wire production QueryOwner and confirm dispatcher

2026-09-22 21:44:56 +08:00

resource_version_binder.go

fix(intentflow): bind resource versions for U10/U11 at plan create

2026-09-23 15:44:48 +00:00

run_control_owner_test.go

feat(intentflow): wire U9–U12 live adapters for multi-intent closeout

2026-09-23 15:26:46 +00:00

run_control_owner.go

feat(intentflow): per-key live rollout for remaining U9-U12 validated_only keys

2026-09-25 14:38:42 +00:00

runtime_ports.go

merge: feature/server-assembly-2026-09-22

2026-09-22 22:04:53 +08:00

semantic_summarizer_test.go

fix(chat): restore D3 semantic shadow under reasoning no-tools

2026-09-23 15:13:19 +00:00

semantic_summarizer.go

fix(chat): restore D3 semantic shadow under reasoning no-tools

2026-09-23 15:13:19 +00:00

trace_bridge.go

feat(docgov): complete review lifecycle gaps for lock/notify/comment/reopen

2026-09-25 20:08:56 +00:00

unhook_test.go

feat(app): drop production outbox and approval hook registration

2026-09-15 14:23:07 +00:00

wire_g1.go

feat(arch): clear G1 U3/U4 sql_write and path exceptions

2026-09-22 21:40:12 +08:00

wire_supplement_impact.go

feat(chat): dialogue triggers for comments/reopen/pending-supplements with mistouch guards

2026-09-25 20:14:10 +00:00