Repository navigation

[G01] Harden seven evidence-packet review boundaries - #103

Merged

jjangg96 merged 136 commits into

mainfrom

orca/issue-79-evidence-hardening

Oct 24, 2026

Merged

[G01] Harden seven evidence-packet review boundaries#103
jjangg96 merged 136 commits into
mainfrom
orca/issue-79-evidence-hardening

Commits on Sep 26, 2026
- fix(docs): harden G01 evidence packet for issue 79
  jjangg96
  committed
  387a647
Commits on Sep 27, 2026
- Harden issue 79 evidence scanner review findings
  jjangg96
  committed
  24c1253
- docs: record scoped Python evidence harness exception
  jjangg96
  committed
  00fc5c4
- fix evidence scanner review gaps
  jjangg96
  committed
  9548096
- fix launcher iterable scanner bypasses
  jjangg96
  committed
  8b5f35b
- Harden issue 79 evidence scanner
  jjangg96
  committed
  184701d
- fix: harden issue 79 evidence scanner flows
  jjangg96
  committed
  9e92128
Commits on Sep 28, 2026
- fix: close issue 79 review boundary gaps
  jjangg96
  committed
  dac58b4
- Harden issue 79 evidence scanner against reviewed alias bypasses
  jjangg96
  committed
  b79709b
- Close issue 79 review gaps in scanner and evidence parity
  jjangg96
  committed
  9233241
- fix(evidence): close issue 79 review bypasses
  jjangg96
  committed
  a61c35f
- fix(evidence): close reviewed AST provenance gaps
  jjangg96
  committed
  2c755af
- fix(evidence): harden output and launcher provenance
  jjangg96
  committed
  1f5f89b
- fix(evidence): close output and path alias gaps
  jjangg96
  committed
  1784c15
- fix(evidence): track scoped aliases and callable taint
  jjangg96
  committed
  bda0eed
- Harden issue 79 evidence scanner and worktree root guard
  jjangg96
  committed
  db8faba
- Close issue 79 review taint and config gaps
  jjangg96
  committed
  7e277ab
- Close issue 79 final evidence scanner review gaps
  jjangg96
  committed
  a55fb9d
- Harden issue 79 scanner and evidence parity gates
  jjangg96
  committed
  b3c335b
- Close reviewed evidence scanner bypasses
  jjangg96
  committed
  6f3f8c8
- Harden G01 evidence scanner against indirect aliases and mutators
  jjangg96
  committed
  31c2e60
- Close exact-head G01 scanner review findings
  jjangg96
  committed
  b902f7d
- Close module dictionary, shutil alias, and AWK review gaps
  jjangg96
  committed
  9a31f99
- Close reader, signal, assertion, and jq review gaps
  jjangg96
  committed
  86d90df
- Close independent G01 scanner bypasses
  jjangg96
  committed
  f24c73a
- Close recursive reader and nested alias review gaps
  jjangg96
  committed
  cf4ae9e
- Close remaining grep and exception alias gaps
  jjangg96
  committed
  415e551
- Close abbreviated grep and warning alias gaps
  jjangg96
  committed
  2390a54
Commits on Oct 3, 2026
- test(g01): reject byte environment and local-path evidence leaks
  jjangg96
  committed
  a6343f3
- fix(g01): refuse escaped module values in evidence scanner
  jjangg96
  committed
  98da2a8
- fix(g01): bound module namespaces and path output provenance
  jjangg96
  committed
  55c5f6f
- docs: give reviewed helper namespaces unique identities
  jjangg96
  committed
  1b10507
- fix: reject path-callable escapes and namespace builtin shadows
  jjangg96
  committed
  ddfdcfd
- fix: close indirect OS path members and environment expansion
  jjangg96
  committed
  55412a0
- fix: disambiguate path member AST node from callback names
  jjangg96
  committed
  a628322
- test: record open AST compile provenance blocker
  jjangg96
  committed
  de28dea
- fix: require packet-derived AST compile provenance
  jjangg96
  committed
  e378ba4
- fix: keep scanner loader modules within local namespaces
  jjangg96
  committed
  6a7a17e
- fix: isolate AST parameter and comprehension provenance
  jjangg96
  committed
  ef81a3e
- fix: invalidate source mutations and constrain compiler providers
  jjangg96
  committed
  85dcf4b
- fix: disambiguate compiler source call nodes
  jjangg96
  committed
  3d76310
- test: preserve open AST reader and Path provider alias blockers
  jjangg96
  committed
  45f8dfd
- fix: track borrowed AST mutations and provider setter aliases
  jjangg96
  committed
  ee513f8
- fix: close opaque receiver and deferred provider mutations
  jjangg96
  committed
  97353ea
- fix: disambiguate provider container probe names
  jjangg96
  committed
  70b29ce
- fix: preserve provider classes through readers and helper returns
  jjangg96
  committed
  6e41c63
- fix: follow saved class readers and iterator origins
  jjangg96
  committed
  0aac0df
- docs: reconcile G01 current module directive with source pin
  jjangg96
  committed
  768c53a
- fix: preserve Path origins in comprehension results
  jjangg96
  committed
  d618c22
- fix: constrain packet extraction and fence historical Git sources
  jjangg96
  committed
  29ca0d5
- fix: preserve lexical packet bounds and ordered rebindings
  jjangg96
  committed
  fe38cc1
- fix: reject stdlib OS reexports and track displayhook sinks
  jjangg96
  committed
  35c18f3
- Checkpoint Git isolation with binding and argv RED evidence
  jjangg96
  committed
  7abfdf2
- Reject shadowed Git builders and mutable argv origins
  jjangg96
  committed
  3b7202b
- Harden Issue 79 Git and path provenance checks
  jjangg96
  committed
  05044cf
- Close Issue 79 evidence recipe provenance gaps
  jjangg96
  committed
  e0c8156
- Harden Issue 79 evidence path provenance
  jjangg96
  committed
  e720603
- Track reviewed module OS reexports
  jjangg96
  committed
  6a069ab
- Harden Issue 79 output and path guards
  jjangg96
  committed
  3e597eb
- Issue 79 preserve bounded evidence proofs
  Codex (Orca worker)
  committed
  a9d602e
- Fix bounded Git capture proof compatibility
  jjangg96
  committed
  dba804f
- Correct seeded Path mutator regression evidence
  jjangg96
  committed
  628c3b4
- Prove bounded Git query capture provenance
  jjangg96
  committed
  062fade
- Close Git collector control-flow escapes
  jjangg96
  committed
  034c131
Commits on Oct 4, 2026
- Harden Issue 79 evidence scanner provenance
  jjangg96
  committed
  82fe7ba
- Harden issue 79 evidence AST boundaries
  jjangg96
  committed
  6574b87
- Reject nested Git process stream mutation
  jjangg96
  committed
  86f4f8f
- Close issue 79 hook and git cleanup proofs
  jjangg96
  committed
  746c1c1
- fix evidence hook alias scope resolution
  jjangg96
  committed
  8d9bd7f
- preserve module hook aliases through global declaration
  jjangg96
  committed
  1377bad
- route hook alias stores through declared scopes
  jjangg96
  committed
  8f24ad6
- resolve nonlocal hook stores to actual owner
  jjangg96
  committed
  734ef68
- track hook aliases through comprehension walrus stores
  jjangg96
  committed
  1fbd7a1
- Harden issue 79 scanner provenance
  jjangg96
  committed
  e9ab4dc
- Reject pattern captures of reviewed Git helpers
  jjangg96
  committed
  74e865e
- Close wrapped Issue 79 provenance escapes
  jjangg96
  committed
  1fde7b9
- Harden wrapped Path mutator provenance
  jjangg96
  committed
  5138442
- Close reflective Path mutator aliases
  jjangg96
  committed
  0cbe820
- Reject escaped reflective Path mutators
  jjangg96
  committed
  2a2ee6c
- Reject unresolved reflective mutator aliases
  jjangg96
  committed
  cc4df01
Commits on Oct 13, 2026
- Harden reflective path mutator tracking
  jjangg96
  committed
  3ad98c5
- Track reflective mutators through callback and holders
  jjangg96
  committed
  4c83bd3
- Clarify reflective transfer RED attribution
  jjangg96
  committed
  30c9aa7
- Close reflected mutator alias transfer paths
  jjangg96
  committed
  95385fd
- Track reflective mutators through helper transfers
  jjangg96
  committed
  62e0fe6
- Harden variadic reflective mutator flows
  jjangg96
  committed
  39e4278
- docs: record bounded protocol review reuse
  jjangg96
  committed
  8de8e07
Commits on Oct 14, 2026
- Pin shared Go 1.26.9 dependency for issue 79 packet requalification
  
  jjangg96
  and
  cursoragent
  committed
  36e39fb
- Requalify packet current profile to Go 1.26.9, preserve history
  
  jjangg96
  and
  cursoragent
  committed
  f362d54
- Memoize scanner self-audit hot paths, fix smoke hang
  
  jjangg96
  and
  cursoragent
  committed
  13867b4
- Fix nested-collision test specimens to use non-sink factory values
  
  jjangg96
  and
  cursoragent
  committed
  b9a5ede
- Follow helper-returned member names for benign reader resolution
  
  jjangg96
  and
  cursoragent
  committed
  5d2e5f0
- Accept helper-returned benign readers on reviewed paths
  
  jjangg96
  and
  cursoragent
  committed
  db79bde
- Classify from-imported os/shutil calls through the fail-closed OS guard
  
  jjangg96
  and
  cursoragent
  committed
  cea81e7
- Propagate command-capable launcher values through callable defaults
  
  jjangg96
  and
  cursoragent
  committed
  7712a2f
- Require quoted Python heredoc delimiters before body inspection
  
  jjangg96
  and
  cursoragent
  committed
  6f61a40
- Reject sensitive operands before implicit exception messages
  
  jjangg96
  and
  cursoragent
  committed
  7638c51
- Reject complex conversions over sensitive values
  
  jjangg96
  and
  cursoragent
  committed
  25a5e44
- Track conversion callables through defaults and containers
  
  jjangg96
  and
  cursoragent
  committed
  d9b6a2d
- Propagate sensitive call arguments into parameters
  
  jjangg96
  and
  cursoragent
  committed
  a0849e3
- Track mutated mapping keys before keys-only exemption
  
  jjangg96
  and
  cursoragent
  committed
  6caab1b
- Reject subscript keys with sensitive representations
  
  jjangg96
  and
  cursoragent
  committed
  bdcabb4
- Resolve from-import aliases at the call site
  
  jjangg96
  and
  cursoragent
  committed
  3eb6aa1
- Classify launchers nested in default expressions
  
  jjangg96
  and
  cursoragent
  committed
  8ddfa6a
- Analyze operand sensitivity with an iterative worklist
  
  jjangg96
  and
  cursoragent
  committed
  4bab99e
- H1: rename scanner-internal locals colliding with body-global name proofs
  
  jjangg96
  and
  cursoragent
  committed
  1407f88
- fix(evidence): refuse unsupported scanner AST runtimes
  jjangg96
  committed
  0c94810
Commits on Oct 15, 2026
- docs: correct issue 79 evidence repository link
  jjangg96
  committed
  80ee230
Commits on Oct 22, 2026
- Close PR103 argument, callable and display provenance gaps
  jjangg96
  committed
  f54ce1d
- Merge reviewed Go 1.26.9 main baseline into issue79 candidate
  jjangg96
  committed
  ca6af56
- fix(evidence): preserve alias and implicit-error provenance
  jjangg96
  committed
  3496887
- fix(evidence): close issue 79 handler and provenance review gaps
  jjangg96
  committed
  91e0d30
- fix(evidence): close issue 79 AST provenance review gaps
  jjangg96
  committed
  f736e2b
- fix(evidence): close protocol alias and async iteration gaps
  jjangg96
  committed
  0b5b0c5
- fix(evidence): close callback-name and async iterator gaps
  jjangg96
  committed
  0a805c6
- fix(evidence): close callback and async protocol gaps
  jjangg96
  committed
  84e1f11
- fix(evidence): close assigned protocol escape gaps
  jjangg96
  committed
  eaa84ce
- fix(evidence): refuse augmented receiver escapes
  jjangg96
  committed
  dc83077
- fix(evidence): reject augmentation through receiver aliases
  jjangg96
  committed
  516de3e
- fix(evidence): close context binding and subscription gaps
  jjangg96
  committed
  4218cd0
- fix(evidence): require proven custom subscription results
  jjangg96
  committed
  8994900
- fix(evidence): close subscription provenance and state gaps
  jjangg96
  committed
  d6e6686
- fix(evidence): refuse unproven subscription dependencies
  jjangg96
  committed
  3b44ecc
- fix(evidence): close keyword member hook and callback proofs
  jjangg96
  committed
  66c33aa
Commits on Oct 23, 2026
- wip(evidence): checkpoint ordered mapping proof and regression gaps
  jjangg96
  committed
  3efd88f
- fix(evidence): preserve closed mapping domains and native type facts
  jjangg96
  committed
  c908ed8
Commits on Oct 24, 2026

Commits

Commits on Sep 26, 2026

Commits on Sep 27, 2026

Commits on Sep 28, 2026

Commits on Oct 3, 2026

Commits on Oct 4, 2026

Commits on Oct 13, 2026

Commits on Oct 14, 2026

Commits on Oct 15, 2026

Commits on Oct 22, 2026

Commits on Oct 23, 2026

Commits on Oct 24, 2026