Recipe Read Guard Metadata Command Remediation#4213

Merged

Trecek merged 8 commits into

recipe-read-guard-safe-metadata-4207

Jul 8, 2026

Commits on Jul 8, 2026

Fix recipe read guard metadata commands
Trecek
committed
fix(review): tighten wc/status flag classification allowlists
Trecek
committed
fix(review): balance substitution test input in recipe-read guard
Trecek
committed
fix(review): tighten allow-case assertions and label bypass intent
Trecek
committed
fix(review): remove invalid result-key assertion in allow case
Trecek
committed
fix(review): add content-staging flags to _GIT_ADD_CONTENT_FLAGS
Trecek
committed
fix(review): strip command wrappers in _command_start_index
Trecek
committed
fix(review): extend deny-bypass tests for redirection, reader subcommands, and content-staging flags
Trecek
committed