novox/mesh-catalog
13
0
Fork 0
Code Issues Pull Requests 3 Actions Packages Projects Releases Wiki Activity
991 Commits 9 Branches 0 Tags
4f4e1ec5b04997fc15731ce81d09ab95f54ba8ae
Commit Graph
2 Commits
Author SHA1 Message Date
jochen 4f4e1ec5b0 Refuse the agent-home gap reached through a module's own directory or a literal home
mesh/merge-gate fail: builds claude-code, claude-licence-manager, restic, sudo → ace, g14, novox, shanks; no bus step; 4 problem(s) the change brings; the …
Details
mesh/repo-check pass: THE CHANGE ALTERS ITS OWN CHECK (merge-check.sh): main's version judged it; the change's judges the pull requests after it merges; it…
Details
mesh/delivery superseded: a newer head of the same pull request
Details 
A path written as ${dir:<id>} can resolve under the agent's home, and a
literal /home path may be it; both escaped the check (hq ADR 0266).
 2026-10-08 21:56:40 +02:00
jochen a17b86cf93 Refuse an archive or a file written into under the agent's home 
The node-engine writes those as root after checking the path, and the agent
account owns its home and could swap a link in between (hq ADR 0266). No
module does it today; this keeps a future one from opening the gap.
 2026-10-08 21:56:40 +02:00