Skip to content

Navigation Menu

Sign inAppearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Sign upAppearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

lidge-jun / opencodex Public

Notifications You must be signed in to change notification settings
Fork 585
Star 7.6k

Code
Issues 43
Pull requests 31
Discussions
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights

fix: bound the six remaining retained-state leaks (#820 wave 2) - #892

#892

Merged

lidge-jun merged 93 commits into

devlidge-jun/opencodex:devfrom

codex/wt2-zero-leak-impllidge-jun/opencodex:codex/wt2-zero-leak-implCopy head branch name to clipboard

Aug 3, 2026

Conversation Commits93 (93)Checks Files changed

Merged

fix: bound the six remaining retained-state leaks (#820 wave 2)#892
lidge-jun merged 93 commits into
devfrom
codex/wt2-zero-leak-impl

Commits

Commits on Aug 2, 2026

docs(plan): split wt3 roadmap into per-bug decade docs with researched mechanisms
lidge-jun
committed
47e7d61
docs(plan): fold audit round-1 blockers into wt3 bug-a docs
lidge-jun
committed
2bb3d91
docs(plan): fold audit round-2 blockers — sol in built-in set, additive seed policy
lidge-jun
committed
6a9b79e
docs(plan): fold audit round-3 — uniform seven-model count, honest precedence fixture
lidge-jun
committed
62bbeb5
fix(providers): route Copilot Responses-only models off chat completions
lidge-jun
committed
14c8214
docs(plan): wt2 root-cause delta + diff-level decade docs for the six bounds
lidge-jun
committed
202ff8a
docs(plan): fold audit-round-1 FAIL blockers into wt2 decade docs
lidge-jun
committed
123cf9e
docs(plan): fold audit-round-2 blockers into wt2 decade docs
lidge-jun
committed
001daef
fix(responses): bound continuation admission, snapshot read, and spill replay
lidge-jun
committed
18289dc
docs(providers): Copilot Responses-only GPT-5 defaults + modelAdapters escape hatch
lidge-jun
committed
e67c0df
fix(responses): close the four audit blockers in continuation admission
lidge-jun
committed
8c3681e
docs(plan): wp-b P — concrete file map and reviewed service_tier semantics
lidge-jun
committed
cbd345b
fix(responses): never read non-regular snapshot targets
lidge-jun
committed
eb44a77
docs(plan): fold wp-b audit round-1 blockers
lidge-jun
committed
198a317
docs(plan): fold wp-b audit round-2 residual — fail-closed scope wording in 000
lidge-jun
committed
b09596e
fix(chat): scope collector tool args per call and normalize overflow to 502
lidge-jun
committed
9c400f5
fix(responses): gate service_tier by provider capability, preserve DeepSeek reasoning replay
lidge-jun
committed
b42d573
docs(providers): supportsServiceTier + preserveResponsesReasoningContent reference rows, capability-gated fast-tier guides
lidge-jun
committed
1e3c050
fix(chat): close the three audit blockers in collector/bridge bounds
lidge-jun
committed
30bf3af
docs(plan): record 030 round-2 accepted residuals
lidge-jun
committed
51cf17c
fix(chat): close the cancel race and the last 413 in replay
lidge-jun
committed
3185610
fix(providers): keep service-tier/reasoning capabilities registry-only
lidge-jun
committed
9f801e3
fix(chat): exit the bridge step without EOF synthesis after cancel
lidge-jun
committed
c985863
docs(plan): wp4 P re-verification — cursor transport implementation design
lidge-jun
committed
8d31b82
docs(plan): wp-c P — stale check narrows scope to registry map + agents-inject + generator override
lidge-jun
committed
a0ea408
fix(cursor): decode Connect frames from a cursor backlog and classify EOF
lidge-jun
committed
10388e1
docs(plan): fold wp-c audit round-1 — generated metadata + pinned tests + full regression set
lidge-jun
committed
2843eb5
fix(providers): give Claude 4.6/4.7 their 1M context windows; authoritative [1m] in generated profiles
lidge-jun
committed
0b30283
fix(cursor): zero-copy frame handoff and terminal backlog cleanup
lidge-jun
committed
e290550
fix(cursor): never release an uncharged rejected chunk
lidge-jun
committed
4f1f059
fix(cursor): never charge stream data after terminal settlement
lidge-jun
committed
956d871
fix(cursor): bound the blob-ID key channel
lidge-jun
committed
cfdad39
fix(cursor): domain-separate blob key namespaces and count keys in snapshots
lidge-jun
committed
e71bd10
fix(cursor): classify blob key bytes with their entries
lidge-jun
committed
93b8811
test(cursor): cross the 4096-entry boundary and use the payload-only counter
lidge-jun
committed
a18d1fd
fix(antigravity): derive fixed-size replay key identities
lidge-jun
committed
687ae1c
fix(antigravity): stream canonical escaping and drop zero-call shells
lidge-jun
committed
dc71043
fix(antigravity): escape lone surrogates in canonical keys (ES2019)
lidge-jun
committed
00cf454
fix(antigravity): make key hashing injective and prove bounded canonicalization
lidge-jun
committed
e448abd
chore: untrack accidentally committed retired-Go file
lidge-jun
committed
2101d50
docs(plan): record UTF-16 key framing as the final antigravity design
lidge-jun
committed
2c2c113
fix(windows): release ephemeral ACL memos and key timeouts by destination
lidge-jun
committed
c8ee260
fix(antigravity): bound canonical key collection and prove walk abort
lidge-jun
committed
0ec6023
test(antigravity): make the canonical-abort assertions regression-tight
lidge-jun
committed
d9d2eb3
fix(windows): scope ephemeral ACL release to temps, keep stable-path memos
lidge-jun
committed
a26b379
test(windows): pin ACL release contracts directly; prompt-journal uses the platform seam
lidge-jun
committed
1c55ca8
fix(windows): close the three residual ACL lifecycle edges
lidge-jun
committed
d5b8863
fix(windows): gate the migration memo release on both residual classes
lidge-jun
committed
f7f5b1b
docs(plan): wt2 campaign close-out (070)
lidge-jun
committed
e456db5
docs(plan): record final full-suite and privacy gates for wt2
lidge-jun
committed
c1098af
fix(antigravity): throttle the lazy expiry scan (CI ubuntu timeout fix)
lidge-jun
committed
fd72782
fix(update): compare installed previews by base version on latest channel
lidge-jun
committed
601c36a
fix(cli): bound the star-prompt agent deferral (#879)
lidge-jun
committed
17ec899
fix(cli): reject future-dated star deferral records on the version-match path
lidge-jun
committed
19d002b
fix(server): match browser extension CORS origins by scheme+authority
lidge-jun
committed
ab5a20c
fix(config): preserve symlinked destinations in atomic writes
lidge-jun
committed
3bba8e7
fix(config): complete wt4 cherry-pick resolution — keep ephemeral ACL release with symlink targets
lidge-jun
committed
b1f299d
fix(config): guard first writes beneath symlinked parent dirs
lidge-jun
committed
89ae572
fix(config): guard before directory mutation in pid/port writers and hardenConfigDir
lidge-jun
committed
5d6bd71
fix(windows): let post-create scheduler verification settle before rollback
lidge-jun
committed
d83a07c
fix(doctor): report how the service actually got its Bun runtime
lidge-jun
committed
22e156e
fix(doctor): carry Bun provenance through execPath relaunches too
lidge-jun
committed
aeb16e1
fix(codex): scope the Bun provenance marker to the ensure call
lidge-jun
committed
2ade543
fix(runtime): record which binary the provenance marker describes
lidge-jun
committed
77f5ae9
fix(doctor): require the binary half for Bun provenance; never settle permanent scheduler XML
lidge-jun
committed
58bb9a6
test(windows): pin transient-vs-invalid fixtures and the zero-delay permanent path
lidge-jun
committed
a468652
Merge remote-tracking branch 'origin/codex/wt3-exec' into codex/wt2-zero-leak-impl
lidge-jun
committed
622d60a
fix(responses): tri-state service_tier gate and authoritative-only [1m] picker rows
lidge-jun
committed
0f8c332
docs(responses): align service_tier contract across types, docs, and locales
lidge-jun
committed
155fc9c
chore(claude): drop the unused shouldMarkOneMillion import from the picker
lidge-jun
committed
6c3930f
docs(ru): drop the redundant classification phrase in the models guide
lidge-jun
committed
f7d8bcd
chore: untrack the retired-Go file again (re-added by 2c2c11357's broad add)
lidge-jun
committed
58e8718
fix: fold the CodeRabbit review round (journal hardening, recovery TOCTOU, canonical depth, frame pinning, abandoned budgets, docs)
lidge-jun
committed
a86ee03
Merge remote-tracking branch 'origin/dev' into codex/wt2-zero-leak-impl
lidge-jun
committed
16099bb
test(integrations): build the GUI before the wire-level CSRF suite when dist is absent
lidge-jun
committed
8ede130
fix(kiro): never split a surrogate pair at the instruction budget
lidge-jun
committed
831283d
fix: never split surrogate pairs at the compaction and kiro boundaries
lidge-jun
committed
eeef7a3
fix(cursor): send Grok 4.5 Fast parameters

jbaehova
authored and
lidge-jun
committed
0793edc
docs(cursor): sync Grok Fast translations

jbaehova
authored and
lidge-jun
committed
05bb74f
docs(cursor): name Grok Fast parameter field

jbaehova
authored and
lidge-jun
committed
ab6a1ed
fix(anthropic): complete AgentRouter streams that end before terminal frames (#658)

Yuxin-Qiao
authored and
lidge-jun
committed
538d755
preserve foreground Luna turns

kimrinking-cell
authored and
lidge-jun
committed
ffc24bc
fix DeepSeek Responses over Codex WebSocket

atian8179
authored and
lidge-jun
committed
5dd965a
fix: preserve routed model identity in Codex

0xWinner98
authored and
lidge-jun
committed
cbb198d
fix: align routed model identity across adapters

0xWinner98
authored and
lidge-jun
committed
9469422
fix: fold the wp6 reviewer round (bounded upstream JSON body, backward-scan repair, strict EOF predicates)
lidge-jun
committed
9794e24
fix: fold the wp6 re-audit round (house bounded-body primitive, exact UTF-8 cap)
lidge-jun
committed
d8b707e
fix: count malformed surrogate pairs as separate U+FFFD replacements in the repair cap
lidge-jun
committed
daf7069
test(memory): give the #848 provenance test headroom on slow CI runners
lidge-jun
committed
a8e0fe0
test(responses-state): probe a genuinely dead pid for the symlinked-sweep test
lidge-jun
committed
0bccc8a
test(storage): budget the two cleanup-mode tests on loaded Windows runners
lidge-jun
committed
80c49cf
test(app-server): tolerate a thrown CIM deadline in the live enumeration test
lidge-jun
committed
6ec6ffc
Merge remote-tracking branch 'origin/dev' into codex/wt2-zero-leak-impl
lidge-jun
committed
a4ff77c

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.