Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
atlas 89092caba4 fix: restrict WriteAgentStateFile to explicit filename allowlist ... Addresses mara's security review: replace validate_state_filename (which accepted any non-traversal filename) with a tight allowlist containing only the two known credential filenames: forge-token and matrix-token. Also addresses argus review feedback: - drop issue tag from priv_proto.rs doc comment - add comment explaining the path-detection heuristic in forge.rs - add note about create_dir_all uid=0 edge case in write_agent_state_file		2026-06-04 14:30:01 +02:00
..
src	fix: restrict WriteAgentStateFile to explicit filename allowlist	2026-06-04 14:30:01 +02:00
Cargo.toml	fix(#1004,#1006): get_host_journal - JournalPriority enum, grep/since/until, default 30/max 100, verbatim container, fix doc comment	2026-06-01 20:57:36 +02:00