Peter Steinberger
|
155118751f
|
refactor!: remove versioned system-run approval contract
|
2026-03-02 01:12:53 +00:00 |
|
Peter Steinberger
|
4e690e09c7
|
refactor(gateway): centralize system.run approval context and errors
|
2026-02-26 22:01:16 +01:00 |
|
Peter Steinberger
|
78a7ff2d50
|
fix(security): harden node exec approvals against symlink rebind
|
2026-02-26 21:47:45 +01:00 |
|
Peter Steinberger
|
10481097f8
|
refactor(security): enforce v1 node exec approval binding
|
2026-02-26 18:09:01 +01:00 |
|
Peter Steinberger
|
4894d907fa
|
refactor(exec-approvals): unify system.run binding and generate host env policy
|
2026-02-26 16:58:01 +01:00 |
|
Peter Steinberger
|
9a4b2266cc
|
fix(security): bind node system.run approvals to env
|
2026-02-26 16:38:07 +01:00 |
|
Peter Steinberger
|
92eb3dfc9d
|
refactor(security): unify exec approval request matching
|
2026-02-26 03:54:37 +01:00 |
|
Peter Steinberger
|
03e689fc89
|
fix(security): bind system.run approvals to argv identity
|
2026-02-26 03:41:31 +01:00 |
|
Brian Mendonca
|
3f5e7f8156
|
fix(gateway): consume allow-once approvals to prevent replay
(cherry picked from commit 6adacd447c61b7b743d49e8fabab37fb0b2694c5)
|
2026-02-24 04:20:30 +00:00 |
|
Peter Steinberger
|
4a3f8438e5
|
fix(gateway): bind node exec approvals to nodeId
|
2026-02-24 03:05:58 +00:00 |
|
Peter Steinberger
|
6007941f04
|
fix(security): harden and refactor system.run command resolution
|
2026-02-21 11:49:38 +01:00 |
|
Peter Steinberger
|
b8b43175c5
|
style: align formatting with oxfmt 0.33
|
2026-02-18 01:34:35 +00:00 |
|
Peter Steinberger
|
31f9be126c
|
style: run oxfmt and fix gate failures
|
2026-02-18 01:29:02 +00:00 |
|
cpojer
|
d0cb8c19b2
|
chore: wtf.
|
2026-02-17 13:36:48 +09:00 |
|
Sebastian
|
ed11e93cf2
|
chore(format)
|
2026-02-16 23:20:16 -05:00 |
|
cpojer
|
90ef2d6bdf
|
chore: Update formatting.
|
2026-02-17 09:18:40 +09:00 |
|
Peter Steinberger
|
cb3290fca3
|
fix(node-host): enforce system.run rawCommand/argv consistency
|
2026-02-14 18:53:23 +01:00 |
|
Peter Steinberger
|
c15946274e
|
fix(gateway): allowlist system.run params
|
2026-02-14 13:27:45 +01:00 |
|
Peter Steinberger
|
a7af646fdf
|
fix(gateway): bind approval ids to device identity
|
2026-02-14 13:27:45 +01:00 |
|
Peter Steinberger
|
318379cdba
|
fix(gateway): bind system.run approvals to exec approvals
|
2026-02-14 13:27:45 +01:00 |
|