Rectify: Shell Capture Filesystem Trust Anchor#4342

Merged

Trecek merged 32 commits into

developfrom

impl-rectify_shell_capture_trust_anchor_2026-07-22_185019-20260722-200252

Jul 24, 2026

Commits on Jul 23, 2026

feat: add descriptor-anchored capture authority
Trecek
committed
fix: anchor shell capture to verified descriptors
Trecek
committed
fix: complete shell capture trust-anchor remediation
Trecek
committed
fix: harden shell capture runtime failures
Trecek
committed
fix: address shell capture trust-anchor audit
Trecek
committed
fix: close remaining shell capture audit gaps
Trecek
committed
fix: scope shell capture provenance assertion
Trecek
committed
fix(review): document output budget bridge names
Trecek
committed
fix(review): validate capture directory ownership and modes
Trecek
committed
fix(review): encode capture marker paths
Trecek
committed
fix(review): bound failed capture process shutdown
Trecek
committed
fix(review): preserve capture failure context
Trecek
committed
fix(review): rename stale capture classifier
Trecek
committed
fix(review): centralize capture transport contract
Trecek
committed
fix(review): keep wrapped commands policy visible
Trecek
committed
fix(review): remove self-referential cleanup debt assertion
Trecek
committed
fix(review): validate hook strength matrix after xdist probes
Trecek
committed
fix(review): bound generated wrapper subprocesses
Trecek
committed
fix(review): assert stale filename classifier decisions
Trecek
committed
fix(review): assert stale capture wall-clock threshold
Trecek
committed
fix(review): bound shell capture hook subprocesses
Trecek
committed
fix: align tests with capture review changes
Trecek
committed
fix: update remaining policy visibility assertions
Trecek
committed
fix(review): make capture authorities factory-only
Trecek
committed
fix(review): preserve native bash command name
Trecek
committed
fix(review): verify captured artifact bytes before publication
Trecek
committed
fix(review): fail successful commands on capture integrity errors
Trecek
committed
fix(review): enforce capture trust guards with AST analysis
Trecek
committed
fix(review): cover capture policy clamp boundaries
Trecek
committed
fix(review): link shell capture retention debt
Trecek
committed
fix(review): assert generated hook exits cleanly
Trecek
committed
fix(review): exercise complete exec footprint limit
Trecek
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Rectify: Shell Capture Filesystem Trust Anchor#4342

Rectify: Shell Capture Filesystem Trust Anchor#4342
Trecek merged 32 commits into
developfrom
impl-rectify_shell_capture_trust_anchor_2026-07-22_185019-20260722-200252

Commits on Jul 23, 2026

feat: add descriptor-anchored capture authority

fix: anchor shell capture to verified descriptors

fix: complete shell capture trust-anchor remediation

fix: harden shell capture runtime failures

fix: address shell capture trust-anchor audit

fix: close remaining shell capture audit gaps

fix: scope shell capture provenance assertion

fix(review): document output budget bridge names

fix(review): validate capture directory ownership and modes

fix(review): encode capture marker paths

fix(review): bound failed capture process shutdown

fix(review): preserve capture failure context

fix(review): rename stale capture classifier

fix(review): centralize capture transport contract

fix(review): keep wrapped commands policy visible

fix(review): remove self-referential cleanup debt assertion

fix(review): validate hook strength matrix after xdist probes

fix(review): bound generated wrapper subprocesses

fix(review): assert stale filename classifier decisions

fix(review): assert stale capture wall-clock threshold

fix(review): bound shell capture hook subprocesses

fix: align tests with capture review changes

fix: update remaining policy visibility assertions

fix(review): make capture authorities factory-only

fix(review): preserve native bash command name

fix(review): verify captured artifact bytes before publication

fix(review): fail successful commands on capture integrity errors

fix(review): enforce capture trust guards with AST analysis

fix(review): cover capture policy clamp boundaries

fix(review): link shell capture retention debt

fix(review): assert generated hook exits cleanly

fix(review): exercise complete exec footprint limit