correx

Files

T

kami 44e15ea1b7 fix(shell): validate every command position against allowlist, not just argv[0] (#61 )

An operator argv runs via `sh -c`, so ["ls","&&","rm","-rf","/"] passed an
argv[0]-only allowlist check with {ls} then executed rm. Now every command
position (argv[0] + the token after each &&/||/|/;/& separator) must be
allowlisted; shell builtins are implicit, redirect targets are treated as
filenames. Tests for the bypass, an all-allowed chain, and a redirect target.

2026-07-12 12:40:42 +04:00

artifacts-cas

docs(dox): build out the DOX AGENTS.md hierarchy

2026-06-28 20:43:27 +04:00

compression

feat(context,infra): compression pipeline stages 4-5 — token pruning + relevance + ToMe

2026-07-01 14:29:56 +04:00

inference

feat(context): reasoning-thread continuity, L3 doc filtering, and gate hardening

2026-07-10 11:13:43 +04:00

persistence

docs(dox): build out the DOX AGENTS.md hierarchy