security: Phase B/C top-10 remediation + full re-audit wave (1 critical + highs)#154

Merged

AVADSA25 merged 19 commits into

mainfrom

security-reaudit-wave2

May 29, 2026

Commits on May 29, 2026

fix(concurrency): bound wall-clock time with run_with_timeout (C4)

Mikarina13
and
claude
committed
fix(state): serialize SQLite + JSON read-modify-writes (C5/H14/M6)

Mikarina13
and
claude
committed
fix(ssrf): guard web_fetch + crew fetch against internal/metadata URLs (H1)

Mikarina13
and
claude
committed
fix(skills): refuse approving a skill that shadows a pinned built-in (H2/H6)

Mikarina13
and
claude
committed
test: A-12 inline-LLM-POST guard + OAuth scope-escalation coverage (Fix #10)

Mikarina13
and
claude
committed
docs: design notes for Fix #8 (routes/chat extraction) + Fix #9 (jsonstore registry)

Mikarina13
and
claude
committed
fix(state): codec_jsonstore Phase 0 hardening + notifications RMW lock + registry (C8)

Mikarina13
and
claude
committed
refactor(dashboard): extract chat_completion phases into helpers (C9 start)

Mikarina13
and
claude
committed
fix(ws): authenticate /ws/voice handshake (re-audit N1, Critical)

Mikarina13
and
claude
committed
fix(ssrf): re-validate every redirect hop in web_fetch + crew fetch (re-audit N3)

Mikarina13
and
claude
committed
fix(skills): resolve symlinked final component in file_write/file_ops (re-audit N4/N10)

Mikarina13
and
claude
committed
fix(auth): enforce TOTP on the ?s= session fallback (re-audit N5)

Mikarina13
and
claude
committed
fix: vision error-handling + observer sys.path leak + _research_jobs lock/TTL (re-audit N7/N8/N9)

Mikarina13
and
claude
committed
fix: builtins AST gap + fail-closed skill-approve + timing-safe PIN (re-audit N19/N20/N21)

Mikarina13
and
claude
committed
build: pin CVE-safe dependency floors + fastmcp import-compat guard (Fix #6)

Mikarina13
and
claude
committed
fix: skill_forge off chat allowlist + atomic config writes (re-audit mediums)

Mikarina13
and
claude
committed
docs: design note for the chat/MCP strict-consent gate (re-audit medium)

Mikarina13
and
claude
committed
feat(consent): MCP hard-refuse for destructive skills + classifier (B1/C) — and regen skill manifest

Mikarina13
and
claude
committed
feat(consent): chat-path consent gate via the AskUserQuestion panel (A2)

Mikarina13
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

security: Phase B/C top-10 remediation + full re-audit wave (1 critical + highs)#154

security: Phase B/C top-10 remediation + full re-audit wave (1 critical + highs)#154
AVADSA25 merged 19 commits into
mainfrom
security-reaudit-wave2

Commits on May 29, 2026

fix(concurrency): bound wall-clock time with run_with_timeout (C4)

fix(state): serialize SQLite + JSON read-modify-writes (C5/H14/M6)

fix(ssrf): guard web_fetch + crew fetch against internal/metadata URLs (H1)

fix(skills): refuse approving a skill that shadows a pinned built-in (H2/H6)

test: A-12 inline-LLM-POST guard + OAuth scope-escalation coverage (Fix #10)

docs: design notes for Fix #8 (routes/chat extraction) + Fix #9 (jsonstore registry)

fix(state): codec_jsonstore Phase 0 hardening + notifications RMW lock + registry (C8)

refactor(dashboard): extract chat_completion phases into helpers (C9 start)

fix(ws): authenticate /ws/voice handshake (re-audit N1, Critical)

fix(ssrf): re-validate every redirect hop in web_fetch + crew fetch (re-audit N3)

fix(skills): resolve symlinked final component in file_write/file_ops (re-audit N4/N10)

fix(auth): enforce TOTP on the ?s= session fallback (re-audit N5)

fix: vision error-handling + observer sys.path leak + _research_jobs lock/TTL (re-audit N7/N8/N9)

fix: builtins AST gap + fail-closed skill-approve + timing-safe PIN (re-audit N19/N20/N21)

build: pin CVE-safe dependency floors + fastmcp import-compat guard (Fix #6)

fix: skill_forge off chat allowlist + atomic config writes (re-audit mediums)

docs: design note for the chat/MCP strict-consent gate (re-audit medium)

feat(consent): MCP hard-refuse for destructive skills + classifier (B1/C) — and regen skill manifest

feat(consent): chat-path consent gate via the AskUserQuestion panel (A2)