Morph MORPH
SIGN IN SIGN UP
dhruvhead / cc-safety-net UNCLAIMED
0 0 12 TypeScript

COMMITS

main
October 4, 2026
J
Merge pull request #209 from kenryu42/fix/opencode-posix-shell-check
J Liew committed
805155c
K
fix(opencode): keep the shell check quote-free and run it through Git Bash
kenryu42 committed
aa7e738
K
fix(opencode): end the shell check at its deadline, not at child exit
kenryu42 committed
cccbc7a
K
fix(opencode): accept any POSIX shell by checking it, not its name
kenryu42 committed
1df4cf3
J
Merge pull request #205 from kenryu42/fix/rule-write-home-scope
J Liew committed
23edd50
K
test(rules): cover a first rule init through a symlinked home
kenryu42 committed
94d1229
K
fix(rules): refuse project-scope rule writes from home
kenryu42 committed
8726de5
K
fix(gui): refuse the user policy as the project draft from home
kenryu42 committed
6c4b81a
K
fix(policy): refuse project-scope policy check and apply from home
kenryu42 committed
57c5310
K
fix(policy): match the user policy through a symlinked home
kenryu42 committed
0d78122
K
fix(policy): stop reading the user policy as a project policy from home
kenryu42 committed
6ac9696
October 3, 2026
K
docs(security): say which Devin hook failures let a call proceed
kenryu42 committed
b584339
K
fix(devin): accept the comments Devin allows in config.json
kenryu42 committed
7b7ac85
K
feat(devin): protect Devin CLI sessions with a PreToolUse hook
kenryu42 committed
9140885
K
fix(droid): keep hooks.json on uninstall while settings.json exists
kenryu42 committed
18f4672
K
fix(io): keep a replaced file's permission bits in atomicWriteFile
kenryu42 committed
a4e763f
K
fix(droid): keep settings.json fallback hooks and flag commandRegex drift
kenryu42 committed
99c2dc1
K
feat(droid): protect Factory Droid sessions with a PreToolUse hook
kenryu42 committed
cf67d46
K
refactor(install): share PreToolUse hook entry handling from Grok Build
kenryu42 committed
455f093
K
feat(secret): protect Factory Droid and Devin CLI credentials and configs
kenryu42 committed
a64fb67
G
release: v2.5.2
github-actions[bot] committed
3db0a46
J
Merge pull request #196 from kenryu42/test/share-secret-invariant-verdicts
J Liew committed
28c70fd
K
test(secret): decide each corpus command once per default mode in the invariant block
kenryu42 committed
2573184
K
ci: run the dependency audit after earlier full-check failures
kenryu42 committed
1265092
K
ci: start packed-runtime with the source checks and audit dependencies last
kenryu42 committed
74acb5c
K
fix(policy): measure project capability weakenings against the session level
kenryu42 committed
9e21cd0
K
feat(policy): ignore project policy weakenings under CC_SAFETY_NET_PROJECT_TIGHTEN_ONLY
kenryu42 committed
aac3c67
K
feat(gate): give every deny a fixed rule id
kenryu42 committed
755a78f
K
fix(gate): gate find -delete workspace scope on the paranoid rm rule state
kenryu42 committed
e0669e7
K
feat(gate): allow find -delete under a workspace subdirectory
kenryu42 committed
c27c7cf