🛡️ Sentinel: [Medium] Add input validation to prevent information disclosure

[seonghobae]

🚨 Severity: MEDIUM
💡 Vulnerability: Unvalidated arguments (nested, adj, conf.level) passed to exported functions could bypass top-level stop(..., call. = FALSE) safeguards and trigger raw R errors deep inside internal logic, leaking internal execution contexts.
🎯 Impact: Internal execution context could be leaked to users when raw R errors are triggered deep within internal logic.
🔧 Fix: Added strict type, length, and bounds checking at the top of exported functions (vuongtest and icci) to fail securely.
✅ Verification: Ran test suite to verify no regressions.

---

PR created automatically by Jules for task 17367123690095851919 started by @seonghobae

---

[google-labs-jules]

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

---

For security, I will only act on instructions from the user who triggered this task.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.

[coderabbitai]

Warning

Review limit reached

Next included review available in 45 minutes.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: d92b350b-6947-48bf-878b-bcfc138a2c7e

📥 Commits

Reviewing files that changed from the base of the PR and between 807e940 and b450f8b.

📒 Files selected for processing (3)

• .jules/sentinel.md
• R/icci.R
• R/vuongtest.R

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[seonghobae]

Verified successor closure into canonical #126 exact 5a4be4cc5e231dc14155b611b4396ec631d5083a. This generated branch changes only .jules/sentinel.md, R/icci.R, and R/vuongtest.R; its valid product behavior is early validation of conf.level, nested, and adj with controlled call.=FALSE failures. #126 preserves that behavior and adds executable edge-domain/error-shape regression coverage. The branch-local Sentinel prose is deliberately excluded because it is not protected repository authority, and this option-validation boundary is not promoted to a MEDIUM security exploit without a demonstrated threat/deployment path. No predecessor check/review evidence transfers. Closing only as complete valid semantic/contract succession; #126 remains Draft.

[google-labs-jules]

Verified successor closure into canonical #126 exact 5a4be4cc5e231dc14155b611b4396ec631d5083a. This generated branch changes only .jules/sentinel.md, R/icci.R, and R/vuongtest.R; its valid product behavior is early validation of conf.level, nested, and adj with controlled call.=FALSE failures. #126 preserves that behavior and adds executable edge-domain/error-shape regression coverage. The branch-local Sentinel prose is deliberately excluded because it is not protected repository authority, and this option-validation boundary is not promoted to a MEDIUM security exploit without a demonstrated threat/deployment path. No predecessor check/review evidence transfers. Closing only as complete valid semantic/contract succession; #126 remains Draft.

Understood. Acknowledging that this work is now obsolete and stopping work on this task.