Security hardening: injection-study findings — P0 fixes, persistence/unread-exec gates, read_only default, sandbox default-on - #145

Merged

jkyberneees merged 11 commits into

mainfrom

fix/sec-benchmark-hardening

Aug 26, 2026

Commits on Aug 26, 2026

fix(cli): unknown flags are a hard error; add --version alias (P0-1, P0-2)
jkyberneees
committed
866451f
fix(observability): stable call_id on batched tool calls in session show + events (P0-3)
jkyberneees
committed
9bb3aa2
feat(events): auditable tool_call_started — args_summary always, raw args opt-in (P0-4)
jkyberneees
committed
2dff98f
feat(danger): persistence risk class — deferred-execution write targets (H-5)
jkyberneees
committed
b78e10b
feat(danger): unread_exec gate — execute an unread script, get asked (H-6)
jkyberneees
committed
0e073b0
feat(danger): non_interactive read_only mode — now the default (H-7)
jkyberneees
committed
d19d5ff
feat(sandbox): default-on with explicit opt-out and loud fallback (H-8)
jkyberneees
committed
5b79f73
feat(loop): reconcile final reply against the action ledger (H-9)
jkyberneees
committed
d6759b4
docs: security benchmark findings — new classes, modes, defaults, observability
jkyberneees
committed
8fcab85
fix(security): review fixes — close H-6 licensing holes, ledger fidelity, sandbox enforcement gaps
jkyberneees
committed
cdee016
docs(cheatsheet): security-hardening sweep — strict flags, sandbox default, risk classes, auditable events
jkyberneees
committed
19c6ee5