Skip to content

Hardening batch from adversarial code review (v3.7.6) #132

Description

@CryptoJones

meta (shipped in #124) — tracking issue for the v3.7.6 hardening batch that addressed findings from a full adversarial code review: note data-integrity (frontmatter/lead + fence-aware parse, symmetric mesh merge convergence), one-bad-byte read hardening, guard false-positive fixes (freshness -C/compound forms, command-anchored forge rules, bare > side-effect, project-vs-global .claude/, negation-aware auth), guard crash-hardening, enforcement fail-open holes (adapter fail-closed, contentless-consult gate-dodge, secret-output 2>/dev/null leak), atomic config/hook/backup writes, checkpoint/mesh/update/lint availability fixes, and the migrate-hook data-loss. 714 tests + ruff + mypy green. Deferred items tracked in #125-#131.

Proudly Made in Nebraska. Go Big Red! 🌽 https://xkcd.com/2347/

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions