docs(doctoring): OpenCode exact-head dispatch audit (2026-09-17) - #2255

Open

seonghobae wants to merge 45 commits into

mainfrom

docs/opencode-exact-head-dispatch-audit-20260917

Commits on Sep 17, 2026

docs(doctoring): OpenCode exact-head dispatch audit (2026-09-17)

seonghobae
and
cursoragent
committed
8057a8a

Commits on Sep 18, 2026

fix(security): allowlist https://api.github.com before urllib urlopen

seonghobae
and
cursoragent
committed
a83d6d3
test(security): pin GitHub API redirect credential boundary
seonghobae
committed
225260a
fix(security): contain GitHub API redirects to admitted origin
seonghobae
committed
0ae2204
test(security): pin Strix redirect credential boundary
seonghobae
committed
062663a
fix(security): contain Strix GitHub API redirects
seonghobae
committed
2708a6b
chore(deps): bump anyio from 4.14.0 to 4.14.2
dependabot[bot]
authored
3758b89

Commits on Sep 19, 2026

test(security): align Strix transport seam with dedicated opener
seonghobae
committed
4dcd25c
test(security): bind authenticated openers at owned seams
seonghobae
committed
834d285
merge(security): carry #2269 urllib GitHub API opener into #2278
seonghobae
committed
6d10002
chore(deps): isolate AnyIO security owner delta
seonghobae
committed
545648e
merge: carry AnyIO lock update onto protected owner
seonghobae
committed
c51c8d2
fix(opencode): materialize every coverage lock input
seonghobae
committed
e43a75b
docs(gap): bind coverage repair to canonical PR
seonghobae
committed
c4a73a1
test(strix): bind evidence helper to trusted source root
seonghobae
committed
513302a
fix(strix): resolve evidence binder from trusted source
seonghobae
committed
c08b13d
test(strix): materialize trusted binder fixtures
seonghobae
committed
ca7e1e7
fix(strix): restore complete verified fixture tree
seonghobae
committed
db1fd61
test(strix): require consumer-free trusted binder fixture
seonghobae
committed
fb9c0e2
repair(strix): restore executable harness after binary blob corruption
seonghobae
committed
78b33a8
test(strix): require binder-free consumer fixture
seonghobae
committed
191bd63
test(strix): separate trusted gate from consumer root
seonghobae
committed
ef1a866
docs(strix): bind consumer isolation evidence to exact commits
seonghobae
committed
abc9a7d
docs(strix): describe separated trusted runtime fixture
seonghobae
committed
00082e8

Commits on Sep 20, 2026

test(strix): retain canonical gate source under scan
seonghobae
committed
782d67b
fix(deps): restore AnyIO owner isolation
seonghobae
committed
8a5251b
test(strix): red specialized fixture owner boundary
seonghobae
committed
a8d6261

Commits on Sep 21, 2026

test(strix): materialize specialized fixtures' trusted runtime outside the consumer root

Seongho Bae
and
claude
committed
bbe225d
test(strix): pin trusted evidence-binder path
seonghobae
committed
1794626

Commits on Sep 23, 2026

Commits on Sep 25, 2026

fix(security): update AnyIO lock for audit gate
seonghobae
committed
3b3ce16

Commits on Sep 26, 2026