Repository navigation

Complete native security engines and scoped policy enforcement - #5

Merged

senamakel merged 87 commits into

mainfrom

security-complete-7328

Oct 11, 2026

Merged

Complete native security engines and scoped policy enforcement#5
senamakel merged 87 commits into
mainfrom
security-complete-7328

Commits on Oct 10, 2026
- feat: add scoped command policy and atomic execution budgets
  
  senamakel
  and
  medullabot
  committed
  7e1d28e
- fix(command): preserve shell grammar and legacy execution admission
  
  senamakel
  and
  medullabot
  committed
  b8b903a
- fix: scan all heredocs and attached redirect targets
  
  senamakel
  and
  medullabot
  committed
  41d1c69
- fix: preserve POSIX heredoc lexical boundaries
  
  senamakel
  and
  medullabot
  committed
  9257240
- refactor: separate heredoc header lexical state
  
  senamakel
  and
  medullabot
  committed
  a2a803f
- fix: retain unsupported expanded heredoc continuations
  
  senamakel
  and
  medullabot
  committed
  e69a538
- fix: use POSIX blanks for heredoc token boundaries
  
  senamakel
  and
  medullabot
  committed
  1d32e20
- Merge remote-tracking branch 'origin/main' into security-complete-7328
  senamakel
  committed
  43a641e
- feat: add bounded native redaction and semantic scans
  
  senamakel
  and
  medullabot
  committed
  353d34a
- style: satisfy strict redactor clippy checks
  
  senamakel
  and
  medullabot
  committed
  8dcf880
- fix: close structured credential and endpoint redaction gaps
  
  senamakel
  and
  medullabot
  committed
  ff43422
- fix(redact): detect direct credential transfers without determiners
  
  senamakel
  and
  medullabot
  committed
  e57de62
- feat(egress): implement scoped native URL and privacy authorization
  
  senamakel
  and
  medullabot
  committed
  f85423a
- fix(egress): close reserved address privacy and lease review gaps
  
  senamakel
  and
  medullabot
  committed
  87d909f
- chore: pin reviewed authenticated TinyBus callback SDK
  
  senamakel
  and
  medullabot
  committed
  86caec9
- fix: authorize native policy calls with pinned broker peer
  
  senamakel
  and
  medullabot
  committed
  cebc2ec
- feat: add exact audit callbacks and restricted Unix sink
  
  senamakel
  and
  medullabot
  committed
  5e5e172
- fix: bound authoritative audit journal and native worker waits
  
  senamakel
  and
  medullabot
  committed
  fc24e2a
- fix(sdk): consume reviewed unique-peer attestation
  
  senamakel
  and
  medullabot
  committed
  d618792
- fix(audit): bind permission decisions to exact durable events
  
  senamakel
  and
  medullabot
  committed
  40ce807
- fix(audit): consume reviewed Windows SDK fixture admission
  
  senamakel
  and
  medullabot
  committed
  aef4a5b
- test(audit): exercise protected Windows journal and blocked rotation
  
  senamakel
  and
  medullabot
  committed
  de6bc9a
- test(audit): cover immutable callbacks and native failure semantics
  
  senamakel
  and
  medullabot
  committed
  6126bd3
- feat(audit): support protected preprovisioned Windows journal
  
  senamakel
  and
  medullabot
  committed
  d5d1f6a
- test: diagnose Windows audit validation stages
  
  senamakel
  and
  medullabot
  committed
  a1e30a8
- chore: consume reviewed TinyBus attestation scope fix
  
  senamakel
  and
  medullabot
  committed
  bac80f2
- test: exercise native audit callback failure and race paths
  
  senamakel
  and
  medullabot
  committed
  7854e38
- fix: validate protected Windows DACL control tokens
  
  senamakel
  and
  medullabot
  committed
  140d146
- test: trigger Windows rotation and reject unsafe storage
  
  senamakel
  and
  medullabot
  committed
  6f32797
- test: probe Windows directory share access accounting
  
  senamakel
  and
  medullabot
  committed
  b280629
- test: exercise audit recovery across process crashes
  
  senamakel
  and
  medullabot
  committed
  2094c5b
Commits on Oct 11, 2026
- fix: retain share-enforced Windows directory handles
  
  senamakel
  and
  medullabot
  committed
  94b0d31
- test(audit): verify loaded native journal and ordinary account isolation
  
  senamakel
  and
  medullabot
  committed
  bd36f03
- test(audit): extend native permission and ACL recovery acceptance
  
  senamakel
  and
  medullabot
  committed
  19d9244
- test: diagnose ordinary Windows account failure stages
  
  senamakel
  and
  medullabot
  committed
  0f86b31
- test: prove ordinary account reaches audit namespace
  
  senamakel
  and
  medullabot
  committed
  1c3daf5
- test: diagnose credential launch native error chain
  
  senamakel
  and
  medullabot
  committed
  a22e310
- test: classify credential launch errors without raw diagnostics
  
  senamakel
  and
  medullabot
  committed
  f037896
- fix: deny null DACL before native ACL accessor
  
  senamakel
  and
  medullabot
  committed
  fe2be6f
- test: keep account helper script outside function lint budget
  
  senamakel
  and
  medullabot
  committed
  6fdb6f6
- test: verify credential parser and independent cleanup
  
  senamakel
  and
  medullabot
  committed
  c85b80d
- test: isolate credentialed command length limit
  
  senamakel
  and
  medullabot
  committed
  4152e9c
- fix: launch ordinary audit helper with bounded stdin command
  
  senamakel
  and
  medullabot
  committed
  2b94b79
- test: require every native ordinary account security phase
  
  senamakel
  and
  medullabot
  committed
  99f7873
- test: diagnose native helper stdin parse and invocation
  
  senamakel
  and
  medullabot
  committed
  7935fd9
- test(audit): classify native child stdin encoding without content
  
  senamakel
  and
  medullabot
  committed
  0eca18f
- test(audit): deliver full foreign-account script as UTF-8 without BOM
  
  senamakel
  and
  medullabot
  committed
  c494cd5
- Fix native manifest audit capability inventory
  
  senamakel
  and
  medullabot
  committed
  118f7b2
- test(audit): distinguish bootstrap and native worker failures
  
  senamakel
  and
  medullabot
  committed
  c9810ba
- fix(audit): release append locks before inherited descriptors close
  
  senamakel
  and
  medullabot
  committed
  e932197
- test(audit): classify child command and receipt failure locations
  
  senamakel
  and
  medullabot
  committed
  3bff76f
- test(audit): identify invisible transport characters and isolate disk deadlines
  
  senamakel
  and
  medullabot
  committed
  db15759
- fix(audit): configure original redirected writer before process start
  
  senamakel
  and
  medullabot
  committed
  334496f
- test(audit): diagnose foreign helper identity environment
  
  senamakel
  and
  medullabot
  committed
  9dfeb06
- fix(audit): bind fixture context to credentialed helper
  
  senamakel
  and
  medullabot
  committed
  cd47860
- test(audit): separate native durability fixture from short deadline
  
  senamakel
  and
  medullabot
  committed
  20a251b
- test(audit): diagnose Windows private-file loop failures
  
  senamakel
  and
  medullabot
  committed
  efd0b61
- test(audit): attempt native rename before checking denial
  
  senamakel
  and
  medullabot
  committed
  c8408c4
- test(audit): diagnose namespace rename failures
  
  senamakel
  and
  medullabot
  committed
  1ceda13
- test(audit): recognize exact native directory access denial
  
  senamakel
  and
  medullabot
  committed
  68f9053
- Diagnose native Windows audit namespace installation
  
  senamakel
  and
  medullabot
  committed
  9ae745e
- Classify sanitized native ACL installer failures
  
  senamakel
  and
  medullabot
  committed
  dc2ce40
- Persist the native fixture ACL without Set-Acl
  
  senamakel
  and
  medullabot
  committed
  27f357e
- test: expose bounded native audit initialization diagnostics
  
  senamakel
  and
  medullabot
  committed
  e8ee29d
- test: pin Windows installer and new file ownership
  
  senamakel
  and
  medullabot
  committed
  cf78c3e
- Fix Windows audit owner checkpoint setup and diagnostics
  
  senamakel
  and
  medullabot
  committed
  5a8a6eb
- Allow create-new access validation in Windows audit fixture
  
  senamakel
  and
  medullabot
  committed
  10de9f8
- Bind newly created audit file ownership before verification
  
  senamakel
  and
  medullabot
  committed
  b85829e
- test(audit): prove child authority before ancestor denial
  
  senamakel
  and
  medullabot
  committed
  a86c7be
- fix(audit): bind Windows test journals to current user
  
  senamakel
  and
  medullabot
  committed
  85839ec
- ci: enforce native Windows audit coverage
  
  senamakel
  and
  medullabot
  committed
  88d0c52
- fix(ci): reject missing native executable coverage
  
  senamakel
  and
  medullabot
  committed
  89cf140
- test(audit): classify ordinary-account startup failures
  
  senamakel
  and
  medullabot
  committed
  20fde37
- test(audit): classify PowerShell startup error records
  
  senamakel
  and
  medullabot
  committed
  f52420d
- test(audit): normalize Windows PowerShell fixture module paths
  
  senamakel
  and
  medullabot
  committed
  36ca060
- fix(audit): export native LCOV and cover Windows callbacks
  
  senamakel
  and
  medullabot
  committed
  946a0cc
- fix: remove needless hashes from Windows callback fixture
  
  senamakel
  and
  medullabot
  committed
  1907aaa
- test: expose native audit generation race diagnostics
  
  senamakel
  and
  medullabot
  committed
  a8a7a62
- Fix native coverage Git diff UTF-8 decoding
  
  senamakel
  and
  medullabot
  committed
  f43fea4
- feat: implement durable exact approvals and authenticated callbacks
  
  senamakel
  and
  medullabot
  committed
  a404f07
- fix: reconcile reusable grants and reclaim durable creation retries
  
  senamakel
  and
  medullabot
  committed
  f5be5b9
- fix: audit reentrant durable winners before returning permission
  
  senamakel
  and
  medullabot
  committed
  7d0161b
- test: pin approval fixture Windows drive paths
  
  senamakel
  and
  medullabot
  committed
  f1c5756
- fix: preserve approval fixture drive paths on Windows
  
  senamakel
  and
  medullabot
  committed
  d6235da
- feat: score verified approvals with bounded native Jev
  
  senamakel
  and
  medullabot
  committed
  31a2f3d
- fix: preserve judge wire defaults under strict clippy
  
  senamakel
  and
  medullabot
  committed
  09207f1
- fix(approval): recheck reusable grants and shrink judge caches
  
  senamakel
  and
  medullabot
  committed
  03d5e36

Commits

Commits on Oct 10, 2026

Commits on Oct 11, 2026