Security hardening — round 7: 11 confirmed defects - #17

Merged

REPPL merged 6 commits into

mainfrom

security-hunt/round-7

Aug 7, 2026

Commits on Aug 7, 2026

fix: bound untrusted collection default settings
claude
committed
8f0d33e
fix: harden untrusted collection data against render crashes and stalls
claude
committed
be86bfc
fix: bound and gate collection-driven caching and filter work
claude
committed
36c7ec1
docs: record round 7 in the decisions log
claude
committed
3e2077d
fix: make image-cache eviction atomic and unbundle the round's reformat
claude
committed
45cb368
docs: correct the round 7 record
claude
committed
2591b03