 admin
|
1f06029b70
|
audit: Tier-1 findings (both repos) + CTRL-001 traversal evidence test
Read-only deep sweep checkpoint. Tier 1 complete for controller+agent:
- CTRL-001 (High): app-import path traversal via unvalidated manifest.AppName (failing evidence test)
- AGENT-001/002/003, CTRL-002 (Medium): wipe TOCTOU, blkid-error classify, decrypt-before-MAC
- 12 Low/Info hardening items + invariant checklist + contract/dead-code/test-gap sections
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-13 17:35:29 +02:00 |
|