 admin
|
bc845badf1
|
audit: Tier-3 (templates clean, BUGHUNT concurrency re-check) + finalize
- Templates/funcmap/XSS/no-:latest all CLEAN; 5/6 surviving BUGHUNT concurrency items FIXED
- CTRL-T3-1 (Low): backup.Manager.stackProvider unlocked read (M2 still present, benign)
- AGENT-T2-1 upgraded to verified-by-test (agent branch evidence test)
- Final report: exec summary, top-10, invariants, contracts (CLEAN), dead-code, test-gaps, not-covered
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-13 17:53:17 +02:00 |
|
|
admin
|
fda0b130cd
|
audit: Tier-2 findings (stacks lifecycle, reconcile crash-safety, contracts)
- CTRL-T2-1 (High): app.yaml persists Deployed:true before compose up -d -> ghost-deployed stuck stack on crash (verified by hand)
- CTRL-T2-2/3 (Medium): no docker-compose exec timeout; protected-stack list has no fail-safe default
- AGENT-T2-1..7 (Low/Info): PVE UPID node guard, WaitTask empty-status, recover side-effect, lane-panic, provision re-mint ordering, PBS WaitVerify
- BUGHUNT H1/H2/H3/H4/H12 confirmed FIXED at eea235b
- Contracts agentapi<->localapi (12 endpoints) + report<->hub: CLEAN
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-13 17:44:49 +02:00 |
|
|
admin
|
1f06029b70
|
audit: Tier-1 findings (both repos) + CTRL-001 traversal evidence test
Read-only deep sweep checkpoint. Tier 1 complete for controller+agent:
- CTRL-001 (High): app-import path traversal via unvalidated manifest.AppName (failing evidence test)
- AGENT-001/002/003, CTRL-002 (Medium): wipe TOCTOU, blkid-error classify, decrypt-before-MAC
- 12 Low/Info hardening items + invariant checklist + contract/dead-code/test-gap sections
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-13 17:35:29 +02:00 |
|