Search results

merge-guard read floor: curl/wget ref-mutation gate keys on literal "api" substring → non-api-host bypass

Status: Open.

#1061 In Synaptic-Labs-AI/PACT-Plugin;

· michael-wojcik opened on Jun 28, 2026

merge-guard: value-carrying privileged-flag (--repo/-R) approval over-blocks — mint glues the option's closing backtick onto the flag value, breaking the #1042 set-equality bind (#1042 follow-up)

Status: Open.

#1059 In Synaptic-Labs-AI/PACT-Plugin;

· michael-wojcik opened on Jun 28, 2026

Teammates start work before claiming their task (pending→in_progress skipped): tighten teammate instructions + add a sound in-process mechanical claim

Status: Open.

#1057 In Synaptic-Labs-AI/PACT-Plugin;

· michael-wojcik opened on Jun 28, 2026

merge-guard: 2 more pre-existing detection under-blocks (quote-unaware comment strip + bash-5.3 funsub)

Status: Open.

#1056 In Synaptic-Labs-AI/PACT-Plugin;

· michael-wojcik opened on Jun 28, 2026

merge-guard: is_dangerous_command under-block — step-4 var-assignment strip launders a literal for a non-shell executor (python os.system(x))

Status: Open.

#1055 In Synaptic-Labs-AI/PACT-Plugin;

· michael-wojcik opened on Jun 28, 2026

merge-guard: is_dangerous_command under-block — python -c subprocess.run list-form evades DANGEROUS_PATTERNS substring scan

Status: Open.

#1053 In Synaptic-Labs-AI/PACT-Plugin;

· michael-wojcik opened on Jun 27, 2026

merge-guard mint ergonomics: silent no-mint on format mismatch + multi-prompt approval (UX hardening)

Status: Open.

#1052 In Synaptic-Labs-AI/PACT-Plugin;

· michael-wojcik opened on Jun 27, 2026

merge_guard: extend governed surface — un-governed destructive ops (OQ-5) + deferred gray-zone flag membership + API-form binding

Status: Open.

#1050 In Synaptic-Labs-AI/PACT-Plugin;

· michael-wojcik opened on Jun 27, 2026

merge_guard: decline-veto false-positives on command-literal tokens (--no-* flags, branch names)

Status: Open.

#1049 In Synaptic-Labs-AI/PACT-Plugin;

· michael-wojcik opened on Jun 27, 2026

fix(ci): pact-memory CLI subprocess tests flake — every save/update cold-installs deps via pip, racing the 60s timeout

Status: Open.

#1047 In Synaptic-Labs-AI/PACT-Plugin;

· michael-wojcik opened on Jun 27, 2026

merge-guard: hygiene — remove dead is_affirmative mint path + strip in-session labels

Status: Open.

#1045 In Synaptic-Labs-AI/PACT-Plugin;

· michael-wojcik opened on Jun 26, 2026

merge-guard: extend protected-branch scope to develop / non-default branches

Status: Open.

#1044 In Synaptic-Labs-AI/PACT-Plugin;

· michael-wojcik opened on Jun 26, 2026