v0.9.30-chronode.2: adversarial-review fixes (graphify path scoping, data-dir split-brain, index-ready flag) + release - #11

Merged

ChronodeAi merged 15 commits into

mainfrom

hotfix/adversarial-fixes

Aug 24, 2026

Commits on Aug 24, 2026

fix(security): constrain client-supplied graphify import path to the project cwd
ChronodeAi
committed
d029a6c
fix(security): redact credentials before echoing an unnormalizable git remote to stderr
ChronodeAi
committed
3553b49
fix(security): harden project capability secret provisioning
ChronodeAi
committed
1ce0b66
fix(correctness): fold --data-dir into the environment before .env hydration
ChronodeAi
committed
d2497d3
fix(correctness): standalone MCP persist path delegates to the data-dir-aware config resolver
ChronodeAi
committed
8df48f7
fix(perf): mark the memory index ready after a clean startup reconciliation
ChronodeAi
committed
875cf5b
fix(correctness): release the consolidation cooldown when the dispatch is rejected
ChronodeAi
committed
de1ab83
fix(security): stamp shared-channel origin on peer Memory upserts
ChronodeAi
committed
174d608
fix(correctness): read user project overrides from the data-dir projects dir
ChronodeAi
committed
e3413ab
docs(changelog): record the adversarial-fixes train under Unreleased
ChronodeAi
committed
569ef69
chore(build): regenerate hook bundles for the adversarial-fixes train
ChronodeAi
committed
24f42b8
chore(gate): refresh R-13 test manifest for five new test files
ChronodeAi
committed
4a0a888
chore(evidence): refresh interface inventory for the adversarial-fixes train
ChronodeAi
committed
d7e30a9
chore(release): 0.9.30-chronode.2
ChronodeAi
committed
5df4a94
chore(evidence): refresh interface inventory for the release commit
ChronodeAi
committed
f155a61

Navigation Menu

v0.9.30-chronode.2: adversarial-review fixes (graphify path scoping, data-dir split-brain, index-ready flag) + release - #11

v0.9.30-chronode.2: adversarial-review fixes (graphify path scoping, data-dir split-brain, index-ready flag) + release#11
ChronodeAi merged 15 commits into
mainfrom
hotfix/adversarial-fixes

Commits on Aug 24, 2026

fix(security): constrain client-supplied graphify import path to the project cwd

fix(security): redact credentials before echoing an unnormalizable git remote to stderr

fix(security): harden project capability secret provisioning

fix(correctness): fold --data-dir into the environment before .env hydration

fix(correctness): standalone MCP persist path delegates to the data-dir-aware config resolver

fix(perf): mark the memory index ready after a clean startup reconciliation

fix(correctness): release the consolidation cooldown when the dispatch is rejected

fix(security): stamp shared-channel origin on peer Memory upserts

fix(correctness): read user project overrides from the data-dir projects dir

docs(changelog): record the adversarial-fixes train under Unreleased

chore(build): regenerate hook bundles for the adversarial-fixes train

chore(gate): refresh R-13 test manifest for five new test files

chore(evidence): refresh interface inventory for the adversarial-fixes train

chore(release): 0.9.30-chronode.2

chore(evidence): refresh interface inventory for the release commit