Repository navigation

feat(security): vendor TinySecurity and migrate filesystem authorization - #7331

Draft

senamakel wants to merge 21 commits into

tinyhumansai:mainfrom

senamakel:security-bus-7328

Commits on Oct 10, 2026
- test(security): characterize RPC contracts and enforce bus-only dependencies
  
  senamakel
  and
  medullabot
  committed
  9117f41
- Merge remote-tracking branch 'upstream/main' into security-bus-7328
  senamakel
  committed
  e2ceeac
- feat(security): vendor native policy and migrate filesystem validators
  
  senamakel
  and
  medullabot
  committed
  1f81c4c
- fix(ci): keep release URLs within their module records
  
  senamakel
  and
  medullabot
  committed
  a02e56a
- chore(vendor): include empty-path rejection in TinySecurity
  
  senamakel
  and
  medullabot
  committed
  27fdc80
- test(embed): initialize keyring at the fixture's runtime workspace
  
  senamakel
  and
  medullabot
  committed
  6089687
- chore(vendor): pin validated TinySecurity scope construction
  
  senamakel
  and
  medullabot
  committed
  76184f9
- chore(vendor): pin fail-closed native path checks
  
  senamakel
  and
  medullabot
  committed
  ca9f85b
- chore(vendor): pin Windows path alias protections
  
  senamakel
  and
  medullabot
  committed
  1311113
- chore(vendor): reject native filesystem metadata failures
  
  senamakel
  and
  medullabot
  committed
  16b44cf
- chore(vendor): pin merged TinySecurity filesystem policy
  
  senamakel
  and
  medullabot
  committed
  38a2bfa
- Merge remote-tracking branch 'upstream/main' into security-bus-7328
  senamakel
  committed
  87fb462
- feat(security): pin published modules and exercise release admission
  
  senamakel
  and
  medullabot
  committed
  66dfdd9
- docs: repair moved embedding guide links
  
  senamakel
  and
  medullabot
  committed
  23e4baa
- ci(docs): bound link checker concurrency for upstream reliability
  
  senamakel
  and
  medullabot
  committed
  609f023
- docs(embed): regenerate current capability reference
  
  senamakel
  and
  medullabot
  committed
  c39f926
- ci(links): authenticate GitHub link validation
  
  senamakel
  and
  medullabot
  committed
  541a3bf
- Merge remote-tracking branch 'upstream/main' into security-bus-7328
  senamakel
  committed
  e1a275f
- docs(security): record remaining consolidated migration tasks
  
  senamakel
  and
  medullabot
  committed
  70ad98c
- fix(sandbox): create grant test symlinks on Windows
  
  senamakel
  and
  medullabot
  committed
  f4f0804
- test(sandbox): detect canonical credential grants
  
  senamakel
  and
  medullabot
  committed
  edc2d93

Navigation Menu

Repository navigation

feat(security): vendor TinySecurity and migrate filesystem authorization - #7331

feat(security): vendor TinySecurity and migrate filesystem authorization#7331
senamakel wants to merge 21 commits into
tinyhumansai:mainfrom
senamakel:security-bus-7328

Commits on Oct 10, 2026

test(security): characterize RPC contracts and enforce bus-only dependencies

Merge remote-tracking branch 'upstream/main' into security-bus-7328

feat(security): vendor native policy and migrate filesystem validators

fix(ci): keep release URLs within their module records

chore(vendor): include empty-path rejection in TinySecurity

test(embed): initialize keyring at the fixture's runtime workspace

chore(vendor): pin validated TinySecurity scope construction

chore(vendor): pin fail-closed native path checks

chore(vendor): pin Windows path alias protections

chore(vendor): reject native filesystem metadata failures

chore(vendor): pin merged TinySecurity filesystem policy

Merge remote-tracking branch 'upstream/main' into security-bus-7328

feat(security): pin published modules and exercise release admission

docs: repair moved embedding guide links

ci(docs): bound link checker concurrency for upstream reliability

docs(embed): regenerate current capability reference

ci(links): authenticate GitHub link validation

Merge remote-tracking branch 'upstream/main' into security-bus-7328

docs(security): record remaining consolidated migration tasks

fix(sandbox): create grant test symlinks on Windows

test(sandbox): detect canonical credential grants