fix(security): carry luvs01 service and security hardening stacks - #5610

Merged

lidge-jun merged 28 commits into

devfrom

codex/260923-luvs-l4-service-security

Sep 23, 2026

Commits on Sep 22, 2026

fix(service): combine startup ownership, token binding, and slot retention

luvs01
authored and
lidge-jun
committed
07f04a1
fix(server): self-heal a replaced package tree via drain-and-restart

luvs01
authored and
lidge-jun
committed
6c2a0e2
fix(security): combine install discovery, credential, and transport hardening

luvs01
authored and
lidge-jun
committed
90c7225
fix(security): combine management-auth and boundary hardening

luvs01
authored and
lidge-jun
committed
52f98dd
fix(security): combine adapter argv and upstream-body hardening

luvs01
authored and
lidge-jun
committed
f2c5ce8
feat(codebuddy): integrate capture-only tools with private prompt staging

authored and
lidge-jun
committed
699a596
fix(client): bound total hub catalog response lifetime

luvs01
authored and
lidge-jun
committed
5fd7e63
fix(grok): reserve model aliases only when the written config stays valid

lidge-jun
and
luvs01
committed
a43a2df
fix(codex-auth): scope Codex OAuth cancellation to the originating flow

lidge-jun
and
luvs01
committed
80872e3
fix(socks5): bound compressed event streams by expansion, not total size

lidge-jun
and
luvs01
committed
6576b84
fix(codex): keep scanning PATH past a missing Windows candidate

lidge-jun
and
luvs01
committed
e7feb77
fix(server): require Windows ACL hardening before a frame-log append

lidge-jun
and
luvs01
committed
701aecf
fix(devin): bind catalog authority to the tenant destination

lidge-jun
and
luvs01
committed
275076b
fix(codebuddy): fail closed on unverified bridge turns and staging collisions

committed
00c3dd1
fix(service): keep service-command ownership bound to the recorded home

lidge-jun
and
luvs01
committed
717ad8b
fix(server): veto a package-tree restart when its server stops or loses ownership

lidge-jun
and
luvs01
committed
48580c4
fix(security): resolve gh from fixed paths and look up pairing grants by digest

lidge-jun
and
luvs01
committed
1a5ea56
test(server): cover the one-shot Aside sync capability end to end

lidge-jun
and
luvs01
committed
d4b2d51
test: register the review follow-up test files in the layout maps
lidge-jun
committed
af8a9ee
test(grok): pin re-injection and strip for a nested user model table

lidge-jun
and
luvs01
committed
ec22aa9
fix(server): harden a Windows frame log once per file identity

lidge-jun
and
luvs01
committed
265b4a5
docs(structure): describe the package-tree restart veto and ownership recheck

lidge-jun
and
luvs01
committed
83ab4c2
fix(server): stop an automatic restart from handing off after an explicit shutdown

lidge-jun
and
luvs01
committed
f5276bf
fix(server): mark a management stop before its asynchronous teardown

lidge-jun
and
luvs01
committed
bb37df7
test(server): allow post-lookup pruning in the pairing digest regression

lidge-jun
and
luvs01
committed
828e7b0

Commits on Sep 23, 2026

fix: repair standalone bridge and restart ownership

lidge-jun
and
mdwsk88
committed
a3bfd55
Merge origin/dev into PR 5610 repair
lidge-jun
committed
428b6e9
Merge origin/dev into service security PR
lidge-jun
committed
322b1bd

Navigation Menu

fix(security): carry luvs01 service and security hardening stacks - #5610

fix(security): carry luvs01 service and security hardening stacks#5610
lidge-jun merged 28 commits into
devfrom
codex/260923-luvs-l4-service-security

Commits on Sep 22, 2026

fix(service): combine startup ownership, token binding, and slot retention

fix(server): self-heal a replaced package tree via drain-and-restart

fix(security): combine install discovery, credential, and transport hardening

fix(security): combine management-auth and boundary hardening

fix(security): combine adapter argv and upstream-body hardening

feat(codebuddy): integrate capture-only tools with private prompt staging

fix(client): bound total hub catalog response lifetime

fix(grok): reserve model aliases only when the written config stays valid

fix(codex-auth): scope Codex OAuth cancellation to the originating flow

fix(socks5): bound compressed event streams by expansion, not total size

fix(codex): keep scanning PATH past a missing Windows candidate

fix(server): require Windows ACL hardening before a frame-log append

fix(devin): bind catalog authority to the tenant destination

fix(codebuddy): fail closed on unverified bridge turns and staging collisions

fix(service): keep service-command ownership bound to the recorded home

fix(server): veto a package-tree restart when its server stops or loses ownership

fix(security): resolve gh from fixed paths and look up pairing grants by digest

test(server): cover the one-shot Aside sync capability end to end

test: register the review follow-up test files in the layout maps

test(grok): pin re-injection and strip for a nested user model table

fix(server): harden a Windows frame log once per file identity

docs(structure): describe the package-tree restart veto and ownership recheck

fix(server): stop an automatic restart from handing off after an explicit shutdown

fix(server): mark a management stop before its asynchronous teardown

test(server): allow post-lookup pruning in the pairing digest regression

Commits on Sep 23, 2026

fix: repair standalone bridge and restart ownership

Merge origin/dev into PR 5610 repair

Merge origin/dev into service security PR