WEBDIENSTE/ECC

Fork 0

mirror of https://github.com/affaan-m/ECC.git synced 2026-08-25 17:02:25 +02:00

Commit Graph

Author	SHA1	Message	Date
Affaan Mustafa	396fadc784	fix: pin Hookify rules before path inspection Open rule files before trusting path metadata, compare the descriptor identity to the live path, and only then validate containment and read bytes. Replace the unsafe temp-file race simulation with an open-first descriptor/path-swap regression.	2026-07-26 05:16:06 -04:00
Affaan Mustafa	504261d069	fix: wire Hookify runtime enforcement Load bounded project-local Hookify rules, evaluate untrusted regexes in a resource-limited worker, and emit event-correct structured warn/block outputs for PreToolUse, PostToolUse, UserPromptSubmit, and Stop. Register bounded entrypoints, prevent recursive Stop loops, document the runtime contract, and package the implementation.\n\nCloses #2561	2026-07-26 05:07:34 -04:00

Author

SHA1

Message

Date

Affaan Mustafa

396fadc784

fix: pin Hookify rules before path inspection

Open rule files before trusting path metadata, compare the descriptor identity to the live path, and only then validate containment and read bytes. Replace the unsafe temp-file race simulation with an open-first descriptor/path-swap regression.

2026-07-26 05:16:06 -04:00

Affaan Mustafa

504261d069

fix: wire Hookify runtime enforcement

Load bounded project-local Hookify rules, evaluate untrusted regexes in a resource-limited worker, and emit event-correct structured warn/block outputs for PreToolUse, PostToolUse, UserPromptSubmit, and Stop. Register bounded entrypoints, prevent recursive Stop loops, document the runtime contract, and package the implementation.\n\nCloses #2561

2026-07-26 05:07:34 -04:00