All pull requests

Pull requests

• Stop API-key Req redirects; assess ex_mcp 1.3.0 cutover

  #63·azmaveth opened Oct 29, 2026Contributor·4 of 5 tasks·

  ·

• fix(security): private coding logs roots and safe Attr term decode

  #62·azmaveth opened Oct 29, 2026Contributor·

  ·

• fix(security): sanitize MCP descriptions and gate tainted send-capable tools

  #61·azmaveth opened Oct 29, 2026Contributor·

  ·

• fix(actions): taint file reads outside trusted roots (Exposure Check AE)

  #60·azmaveth opened Oct 29, 2026Contributor·

  ·

• fix(agent): keep compaction summaries untrusted and fenced

  #57·azmaveth opened Oct 29, 2026Contributor·

  ·

• Restrict trusted instruction files to approved folders

  #55·azmaveth opened Oct 29, 2026Contributor·4 tasks done·

  ·

• Close four MCP tool-pin audit gaps

  #54·azmaveth opened Oct 29, 2026Contributor·

  ·

• fix(security): keep hands spawn workspace paths out of the tmux command string

  #52·azmaveth opened Oct 29, 2026Contributor·

  ·

• Cap gateway signed-request body reads at 1 MiB before auth

  #51·azmaveth opened Oct 29, 2026Contributor·

  ·

• Refuse LLM spend until an operator sets a budget

  #50·azmaveth opened Oct 23, 2026Contributor·

  ·

• Document MCP session binding and planned per-client gateway keys

  #49·azmaveth opened Oct 23, 2026Contributor·

  ·

• Fail closed on leftover embeddings and derived nodes after code_pattern_delete

  #44·azmaveth opened Oct 23, 2026Contributor·

  ·

• Refuse arbor-dev-key outside loopback :dev

  #41·azmaveth opened Oct 23, 2026Contributor·

  ·

• Pin MCP tool fingerprints, persist them, and quarantine rug-pulls

  #29·azmaveth opened Oct 20, 2026Contributor·

  ·