Repository navigation
Release beta.5: gated missions, projects and security fixes - #13
Merged
Merged
Conversation
Mission templates and project context grant no authority; mailbox tools remain read-only. Prevent proof exports from overwriting existing files. Include ambiguity-safe Telegram delivery, sandbox cache repair and pinned pypdf security fixes.
morningstarnasser
changed the title
added 2 commits
October 21, 2026 20:49
Keep operator state outside versioned code, refuse managed self-updates before effects, and protect profile configuration, identities and shipped mission assets. Diagnostics and cancelled setup remain non-mutating; legacy installs retain their existing layout.
morningstarnasser
marked this pull request as ready for review
October 21, 2026 19:03
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Public beta.5: missions, projects and release hardening
This completes the maintenance candidate on current public history, preserving the
newer desktop/QMP and execution-reliability work. No private history, operator files,
credentials or instance overlays are included.
continuation; every proposed action still passes the existing kernel.
model checks with redirect refusal.
The model proposes, it does not decide: this adds no standing authority, automatic
approval, remote host permission, mailbox mutation tool or tool-enabled reasoner.
Homebrew separates versioned code from each user's private profile. Its managed
self-update refusal cannot be bypassed by invoking the module directly. Diagnostics
and cancelled setup do not create a profile. The tap fetches33original pinned PyPI
wheels, then installs offline under the signed runtime lock; no combined wheel bundle
or bottle is redistributed. Third-party components retain their own licenses.
Final qualification:3352 tests passed,3 explicit skips;269/269 adversarial cases;
44/44 real-model E2E twice; folder-dossier real-model mission twice with read-back;
101 desktop-boundary tests; Linux/macOS CI all4jobs green. Exact signed archive:
ddd24ce4d26f79640fe7ce9e9770a9aa770e8c73700895212fa253772cd63059.Two clean installs and two beta4→beta5 signed upgrade/rollback rehearsals passed.
Native final formula install/test twice, second network-denied; two-prefix state
retention/rollback passed. Public installer/tap/website read-back follows publication.
OSV0 across all4locks; public hygiene pass; entire new release diff Gitleaks0.
Full public history scan:10 historical synthetic fixtures/public verification-key
matches, no real secret identified. No ignore rules added.