fix(lab): CL-02 post-merge hardening - #1343

Merged

Wibias merged 20 commits into

lidge-jun:devfrom

Wibias:fix/cl-02-post-merge-hardening

Aug 9, 2026

Commits on Aug 9, 2026

test(lab): cover CL-02 post-merge regressions
Wibias
committed
8bcf075
docs(lab): track CL-02 post-merge hardening
Wibias
committed
fe96830
fix(lab): harden chunked ledger replay
Wibias
committed
fbb1f85
fix(lab): reject embedded raw filesystem paths
Wibias
committed
bf828c8
fix(lab): classify malformed contract artifacts as mismatches
Wibias
committed
2137bc6
fix(lab): harden sensitive purge defaults and durability reporting
Wibias
committed
88c5cba
fix(lab): preserve idempotent concurrent artifact publication
Wibias
committed
54cd879
fix(lab): type conformance execution timestamps
Wibias
committed
7c9ead9
fix(lab): carry execution timestamps from conformance runner
Wibias
committed
36ab2cd
fix(lab): fail closed at conformance persistence seam
Wibias
committed
739d5f9
docs(lab): record CL-02 merge and hardening follow-up
Wibias
committed
b81a984
test(lab): cover freshness and unsupported projection paths
Wibias
committed
eaeff07
test(lab): cover latest post-merge review bypasses
Wibias
committed
35fdcbd
fix(lab): reject malformed contract UTF-8
Wibias
committed
759c7fe
fix(lab): reject raw POSIX path bypasses
Wibias
committed
16a8a5a
fix(lab): use canonical export directory in purge
Wibias
committed
06232f4
fix(lab): restore canonical exportDir path
Wibias
committed
1ad5419
fix(lab): allow empty purge targets for directory-scoped actions
Wibias
committed
4e4b9a4
fix(lab): address CodeRabbit path, put, and test findings
Wibias
committed
0da8c27
fix(lab): reject root-only and doubled-slash POSIX paths
Wibias
committed
953e75f

Navigation Menu

fix(lab): CL-02 post-merge hardening - #1343

fix(lab): CL-02 post-merge hardening#1343
Wibias merged 20 commits into
lidge-jun:devfrom
Wibias:fix/cl-02-post-merge-hardening

Commits on Aug 9, 2026

test(lab): cover CL-02 post-merge regressions

docs(lab): track CL-02 post-merge hardening

fix(lab): harden chunked ledger replay

fix(lab): reject embedded raw filesystem paths

fix(lab): classify malformed contract artifacts as mismatches

fix(lab): harden sensitive purge defaults and durability reporting

fix(lab): preserve idempotent concurrent artifact publication

fix(lab): type conformance execution timestamps

fix(lab): carry execution timestamps from conformance runner

fix(lab): fail closed at conformance persistence seam

docs(lab): record CL-02 merge and hardening follow-up

test(lab): cover freshness and unsupported projection paths

test(lab): cover latest post-merge review bypasses

fix(lab): reject malformed contract UTF-8

fix(lab): reject raw POSIX path bypasses

fix(lab): use canonical export directory in purge

fix(lab): restore canonical exportDir path

fix(lab): allow empty purge targets for directory-scoped actions

fix(lab): address CodeRabbit path, put, and test findings

fix(lab): reject root-only and doubled-slash POSIX paths