security: harden post-merge service and management boundaries - #707

Closed

LeoWang331 wants to merge 25 commits into

lidge-jun:devfrom

LeoWang331:security/260729-post-merge-hardening

Commits on Jul 29, 2026

fix(security): harden management and service boundaries
YourName
committed
test: avoid secret scanner false positive
YourName
committed
fix(ci): make security hardening cross-platform
YourName
committed
fix(ci): stabilize cross-platform security checks
YourName
committed
test(gui): make copy feedback timing deterministic
YourName
committed
test(usage): allow Windows log rotation budget
YourName
committed
test(claude): make idle ping timing deterministic
YourName
committed
test(kiro): allow concurrent replay budget
YourName
committed
ci: retry after Bun runner crash
YourName
committed
test(anthropic): allow manual pool selection budget
YourName
committed
fix(security): harden config ownership lock lifecycle
YourName
committed
fix(security): harden service credential delivery
YourName
committed
fix(security): validate model probe destinations
YourName
committed
fix(update): require executable posix npm candidates
YourName
committed
test: stabilize proxy environment coverage
YourName
committed
docs: clarify proxy and service token behavior
YourName
committed

Commits on Jul 30, 2026