Commits

Commit history

1. Commits on Aug 25, 2026

   • fix: match short recorded values as whole tokens and catch short secrets inside long files

     vitali87

     committed
     70e89a2View commit details

     Copy full SHA for 70e89a2

     View code at this pointBrowse repository at this point

   • docs: document the tool closures and helpers touched by the trust boundary work

     vitali87

     committed
     c4c8858View commit details

     Copy full SHA for c4c8858

     View code at this pointBrowse repository at this point

   • fix: record shell stderr in the egress gate and stop mock usage leaking into session totals

     vitali87

     committed
     a93d42cView commit details

     Copy full SHA for a93d42c

     View code at this pointBrowse repository at this point

   • docs: add docstrings to the tools and tests touched by the trust boundary work

     vitali87

     committed
     cb9a3d2View commit details

     Copy full SHA for cb9a3d2

     View code at this pointBrowse repository at this point

   • feat: move web_search into a sandboxed research sub-agent with a data-only envelope and a verbatim-span egress gate

     vitali87

     committed
     5c73b94View commit details

     Copy full SHA for 5c73b94

     View code at this pointBrowse repository at this point
2. Commits on Aug 23, 2026

   • fix(security): match GNU long-option abbreviations for denied sort options

     vitali87

     committed
     e9f2382View commit details

     Copy full SHA for e9f2382

     View code at this pointBrowse repository at this point

   • fix(security): deny sort output and temp-dir options hidden in short-option clusters

     vitali87

     committed
     e1cf70eView commit details

     Copy full SHA for e1cf70e

     View code at this pointBrowse repository at this point

   • fix(security): deny option-carried file inputs and contain attached option values in noninteractive shell

     vitali87

     committed
     e20f1adView commit details

     Copy full SHA for e20f1ad

     View code at this pointBrowse repository at this point
3. Commits on Aug 22, 2026

   • fix(evals): count uniq operands through double-dash, deny symlink-following traversal, and fingerprint the backend

     vitali87

     committed
     d8db3e1View commit details

     Copy full SHA for d8db3e1

     View code at this pointBrowse repository at this point

   • fix(evals): close the double-dash operand bypass and ignored-file corpus dirt

     vitali87

     committed
     0b7c0d0View commit details

     Copy full SHA for 0b7c0d0

     View code at this pointBrowse repository at this point

   • fix(evals): deny write-form reads, symlink escapes, and stray files after corpus commit switch

     vitali87

     committed
     b9d61e7View commit details

     Copy full SHA for b9d61e7

     View code at this pointBrowse repository at this point

   • fix(evals): harden the qa benchmark against review findings on shell approval, resume mixing, corpus dirt, and oracle scope

     vitali87

     committed
     3e66aaaView commit details

     Copy full SHA for 3e66aaa

     View code at this pointBrowse repository at this point
4. Commits on Aug 18, 2026

   • fix: block git config writes to keys whose value git executes (GHSA-2rr7-8xrw-gmhr)

     Show description for 8d78067
     vitali87

     committed
     8d78067View commit details

     Copy full SHA for 8d78067

     View code at this pointBrowse repository at this point
5. Commits on Aug 16, 2026

   • fix: harden C# indexing and shell-read approval defaults (adopts #1231) (#1296)

     Show description for 3990056
     

     vitali87

     and

     DMA-AI-agent

     authored
     3990056View commit details

     Copy full SHA for 3990056

     View code at this pointBrowse repository at this point
6. Commits on Jul 22, 2026

   • fix(shell): surface spawn errors with failing segment and executable

     vitali87

     committed
     11569e9View commit details

     Copy full SHA for 11569e9

     View code at this pointBrowse repository at this point
7. Commits on May 18, 2026

   • feat(permissions): add shift-tab toggle for YOLO mode bypassing approval and shell allowlist

     vitali87

     committed
     d9b9680View commit details

     Copy full SHA for d9b9680

     View code at this pointBrowse repository at this point
8. Commits on Feb 27, 2026

   • fix: resolve failing unit tests for CLI smoke, shell command, and path validation

     vitali87

     committed
     60721d4View commit details

     Copy full SHA for 60721d4

     View code at this pointBrowse repository at this point

   • test(embedder): add tests for batch embedding and cache; add __slots__ to Beam

     vitali87

     committed
     9597528View commit details

     Copy full SHA for 9597528

     View code at this pointBrowse repository at this point
9. Commits on Feb 2, 2026

   • fix(tests,ci): resolve 65 test failures and add cross-platform CI

     whoisjayd

     committed
     ddca114View commit details

     Copy full SHA for ddca114

     View code at this pointBrowse repository at this point
10. Commits on Jan 3, 2026

    • fix: add path resolution to block relative path bypass for rm

      vitali87

      committed
      eaee630View commit details

      Copy full SHA for eaee630

      View code at this pointBrowse repository at this point

    • fix: escaped quote bypass in _is_outside_single_quotes

      vitali87

      committed
      891688cView commit details

      Copy full SHA for 891688c

      View code at this pointBrowse repository at this point
11. Commits on Jan 1, 2026

    • refactor: extract finalize_segment and finalize_group helpers in _parse_command

      vitali87

      committed
      864a096View commit details

      Copy full SHA for 864a096

      View code at this pointBrowse repository at this point

    • refactor: remove unused _is_outside_quotes and _split_pipeline functions

      vitali87

      committed
      1346798View commit details

      Copy full SHA for 1346798

      View code at this pointBrowse repository at this point

    • fix(security): address remaining review comments

      vitali87

      committed
      0993f76View commit details

      Copy full SHA for 0993f76

      View code at this pointBrowse repository at this point

    • fix(security): address critical shell command vulnerabilities

      vitali87

      committed
      4053c96View commit details

      Copy full SHA for 4053c96

      View code at this pointBrowse repository at this point

    • fix: replace create_subprocess_shell with secure manual process chaining

      vitali87

      committed
      4794271View commit details

      Copy full SHA for 4794271

      View code at this pointBrowse repository at this point

    • fix: improve shell security validation with single-pass refactor

      vitali87

      committed
      d494d68View commit details

      Copy full SHA for d494d68

      View code at this pointBrowse repository at this point

    • fix(security): use explicit system dirs list and add nosec B602 comment

      vitali87

      committed
      67bf1a7View commit details

      Copy full SHA for 67bf1a7

      View code at this pointBrowse repository at this point
12. Commits on Dec 31, 2025

    • refactor(security): split dangerous patterns into pipeline and segment sets

      vitali87

      committed
      95d13f3View commit details

      Copy full SHA for 95d13f3

      View code at this pointBrowse repository at this point

    • fix(security): address review findings for shell command validation

      vitali87

      committed
      5bd589eView commit details

      Copy full SHA for 5bd589e

      View code at this pointBrowse repository at this point

    • fix(security): add comprehensive shell command security validation

      vitali87

      committed
      e7f234bView commit details

      Copy full SHA for e7f234b

      View code at this pointBrowse repository at this point

    • fix: check dangerous commands in all pipeline segments

      vitali87

      committed
      1d53819View commit details

      Copy full SHA for 1d53819

      View code at this pointBrowse repository at this point

    • fix: add shell pipe support with security validation

      vitali87

      committed
      57c847bView commit details

      Copy full SHA for 57c847b

      View code at this pointBrowse repository at this point
13. Commits on Dec 30, 2025

    • refactor: make AgenticToolName single source of truth for tool names

      vitali87

      committed
      5185ab4View commit details

      Copy full SHA for 5185ab4

      View code at this pointBrowse repository at this point
14. Commits on Dec 28, 2025

    • feat: add decorator pattern implementation with comprehensive tests

      vitali87

      committed
      a50084bView commit details

      Copy full SHA for a50084b

      View code at this pointBrowse repository at this point