audit: egress zoned/non-ASCII host bypass, SDK stream reuse, adapter close, doc drift, cuts by CMGS · Pull Request #524 · cocoonstack/sandbox

egress: refuse a zoned or non-ASCII host before the policy match

CMGS

committed

21e452a

sdk/go: a caller's writer error never parks a stream mid-flight

CMGS

committed

80f4608

sdk/openai: delete closes the session's client

CMGS

committed

2e202eb

e2e: android and browser smokes delete their checkpoint past the run deadline

CMGS

committed

db73534

docs: operator token reach, tun offload sides, fixture parse, checkpoint fields, redirect on any refusal

CMGS

committed

cdc53c2

cut: one held tun address scan, flat pool and sweep branches, dir delete through RemoveDirEntries, port_forward wraps frameErr

CMGS

committed

9d759be

cut: Template.new claims through _claim_from on both paths

CMGS

committed

f474b15

review: tunnet FrameLen leaves the gap between the Hello and Packet blocks

CMGS

committed

1ddad3e

cut: the Makefile LOCALBIN rule no target depends on; go install makes GOBIN

CMGS

committed

7960b13

silkd: a pty opened for a user hands that user its tty

CMGS

committed

1d5e282

egress: the SOCKS5 door records a zoned or non-ASCII name as a deny

CMGS

committed

56c6314

Navigation Menu

Repository navigation

audit: egress zoned/non-ASCII host bypass, SDK stream reuse, adapter close, doc drift, cuts - #524

audit: egress zoned/non-ASCII host bypass, SDK stream reuse, adapter close, doc drift, cuts#524
CMGS merged 11 commits into
mainfrom
fix/audit-post-523

Commits on Nov 8, 2026

egress: refuse a zoned or non-ASCII host before the policy match

sdk/go: a caller's writer error never parks a stream mid-flight

sdk/openai: delete closes the session's client

e2e: android and browser smokes delete their checkpoint past the run deadline

docs: operator token reach, tun offload sides, fixture parse, checkpoint fields, redirect on any refusal

cut: one held tun address scan, flat pool and sweep branches, dir delete through RemoveDirEntries, port_forward wraps frameErr

cut: Template.new claims through _claim_from on both paths

review: tunnet FrameLen leaves the gap between the Hello and Packet blocks

cut: the Makefile LOCALBIN rule no target depends on; go install makes GOBIN

silkd: a pty opened for a user hands that user its tty

egress: the SOCKS5 door records a zoned or non-ASCII name as a deny