fix: phase-zero trust hardening for restore, hooks, imports and serve - #5

Merged

Patel230 merged 21 commits into

mainfrom

chore/phase-zero-trust

Sep 29, 2026

Commits on Sep 29, 2026

feat(store): checksummed migration ledger, indexes and provenance schema
across
committed
844e0c9
feat(config): refuse symlinked components in Across-managed directories
across
committed
a1a7d6d
feat(git): resolve revisions with rev-parse --verify before use
across
committed
1dbfec5
feat(git): marker-owned hook installation with staged, reversible upgrades
across
committed
f1ebe4f
fix(adapter): replace capability overclaims with a protocol-v1 shell
across
committed
87e8559
feat(cli): typed errors, validated arguments and transactional mutations
across
committed
718ec40
feat(backup): closed archive validation and staged restore
across
committed
3d065cc
feat(serve): embed the console assets and harden the loopback server
across
committed
e3b9ab6
test(e2e): cover CLI exit codes, adapters, MCP, import confinement and hooks
across
committed
0a977e6
fix(config): resolve the chosen Across home instead of rejecting symlinks
across
committed
8b717a8
fix(backup): never destroy an unrelated directory on restore
across
committed
fcc8687
fix(git): make chained hooks actually run the preserved original
across
committed
d4d7865
fix(cli): record the caller's export path as the source origin
across
committed
1a96705
fix(cli): tombstones only block the identity that was deleted
across
committed
e9423fc
refactor(store): drop schema that nothing reads or writes before it is frozen
across
committed
64cf6d8
feat(cli): add `hook uninstall`; remove helpers nothing calls
across
committed
5536cb6
test(cli): cover session fork, context manifests, checkpoint bundles and handoffs
across
committed
c0675e8
fix(serve): accept the console cookie only for same-origin requests
across
committed
e84e16a
chore: remove the unwired logging package and the unused logs/ directory
across
committed
9cfadca
docs: reconcile README, SECURITY, CHANGELOG and AGENTS with the code
across
committed
67faaef
chore: keep local research notes and audit reports out of the repository
across
committed
2054eb8

Navigation Menu

fix: phase-zero trust hardening for restore, hooks, imports and serve - #5

fix: phase-zero trust hardening for restore, hooks, imports and serve#5
Patel230 merged 21 commits into
mainfrom
chore/phase-zero-trust

Commits on Sep 29, 2026

feat(store): checksummed migration ledger, indexes and provenance schema

feat(config): refuse symlinked components in Across-managed directories

feat(git): resolve revisions with rev-parse --verify before use

feat(git): marker-owned hook installation with staged, reversible upgrades

fix(adapter): replace capability overclaims with a protocol-v1 shell

feat(cli): typed errors, validated arguments and transactional mutations

feat(backup): closed archive validation and staged restore

feat(serve): embed the console assets and harden the loopback server

test(e2e): cover CLI exit codes, adapters, MCP, import confinement and hooks

fix(config): resolve the chosen Across home instead of rejecting symlinks

fix(backup): never destroy an unrelated directory on restore

fix(git): make chained hooks actually run the preserved original

fix(cli): record the caller's export path as the source origin

fix(cli): tombstones only block the identity that was deleted

refactor(store): drop schema that nothing reads or writes before it is frozen

feat(cli): add `hook uninstall`; remove helpers nothing calls

test(cli): cover session fork, context manifests, checkpoint bundles and handoffs

fix(serve): accept the console cookie only for same-origin requests

chore: remove the unwired logging package and the unused logs/ directory

docs: reconcile README, SECURITY, CHANGELOG and AGENTS with the code

chore: keep local research notes and audit reports out of the repository