v0.4.5: restructure redact(), add property tests, verify every Linux path on real hardware - #3

Merged

deva0x merged 9 commits into

mainfrom

fix/v0.4.5-round3

Jul 25, 2026

Commits on Jul 25, 2026

fix(redact): the path-component exemption leaked credentials in assignments

deva0x
and
claude
committed
e4a208e
refactor(redact): single-token assignment scanning + property tests

deva0x
and
claude
committed
68c2de2
fix(redact): round-3 findings — 4 leaks, 1 detection hole, 1 snapshot-time stall

deva0x
and
claude
committed
4c3eb0a
fix: round-3 guard findings — recovery fabricated a flood, 2 kill switches, 3 half-fixes

deva0x
and
claude
committed
7d94788
fix: validate snapshot field types and reject a planted baseline

deva0x
and
claude
committed
cc42c57
test: the CLI recovery fixture must match the runner's privilege level

deva0x
and
claude
committed
2ca979e
fix(install.sh): a missing PATH entry aborted the installer under set -e

deva0x
and
claude
committed
ddd2da9
test: pin the install.sh `|| return` bug that silently disabled monitoring

deva0x
and
claude
committed
cb18dae
v0.4.5: restructured redact() + property tests; all Linux items verified on a real box

deva0x
and
claude
committed
c612ceb