jochen
5eab586116
mesh/merge-gate pass: builds gitea → novox; no bus step; every machine composes with the change as it did without (4 of 4 compose)
mesh/repo-check pass: its merge-check.sh passed, each part in its toolchain: merge-check.sh (go), merge-check-typescript.sh (typescript)
mesh/delivery superseded: a newer head of the same pull request
The confirmation review of 2026-10-09 found the dedicated tools building paths from caller text: a branch named .. became DELETE /repos/o/r/ (the repository), a file path ../../../../version reached /api/v1/version, and a sha with ?sudo= set a status as any user. Each caller-supplied segment now goes through one helper refusing empty, . and .. and / ? # %; a sha must be a commit; and the client judges every path once more as it sends it: no dot or empty segment, encoded or not, and only the allow-listed query keys.