mesh-adminandClaude Opus 5.5 def3ccefe3 Refuse templates read through a symlink anywhere under files/ ...

A symlinked files/ or a symlinked directory under it let module check, the merge
gate and module add read a template from outside the repository tree, and a
symlink no template names passed them while the build's packing refuses it
(review of mesh-controller#313). Every entry under files/ must now be a plain
directory or file, and templates are read through an os.Root of the module's
directory.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-14 00:51:48 +00:00

..

mesh-builder

Let a drain lapse, bound the gate's wait on the controller's clock, keep a busy wait out of apply time

2026-10-14 00:07:31 +02:00

mesh-controller

Refuse templates read through a symlink anywhere under files/

2026-10-14 00:51:48 +00:00