Repository navigation

feat(project): --untrusted, with the project read beneath a cap-std directory handle - #873

Merged

raymondk merged 8 commits into

rk/bundle-symlinksfrom

rk/untrusted-cap-std

Nov 11, 2026

Merged

feat(project): --untrusted, with the project read beneath a cap-std directory handle#873
raymondk merged 8 commits into
rk/bundle-symlinksfrom
rk/untrusted-cap-std

Commits on Nov 10, 2026
- feat(project): --untrusted, with the project read beneath a cap-std directory handle
  
  raymondk
  and
  claude
  committed
  e98730f
- fix(untrusted): refuse a pipe before it is read, vet what a plugin is handed, take a recipe path from the working directory
  
  raymondk
  and
  claude
  committed
  7a7872e
- refactor(untrusted): leave .icp to the tool, unguarded
  
  raymondk
  and
  claude
  committed
  fdc3ed8
- feat(untrusted): refuse a recipe, rather than read it and vet what it renders to
  
  raymondk
  and
  claude
  committed
  9de2082
- fix(untrusted): the project is where the command stands, and no root is searched for
  
  raymondk
  and
  claude
  committed
  23c0f19
- docs(untrusted): say that --untrusted is run from the directory that holds icp.yaml
  
  raymondk
  and
  claude
  committed
  0556a71
- docs(untrusted): say in the flag's help that .icp is not checked and is to be deleted
  
  raymondk
  and
  claude
  committed
  4b0656f
Commits on Nov 11, 2026
- docs(untrusted): say that vet checks no containment and takes it from the filesystem it is given
  
  raymondk
  and
  claude
  committed
  9a929ea