fix: flag import-only custom pickle globals#1499

Merged

mldangelo-oai merged 39 commits into

mainfrom

mdangelo/codex/fix-picklescan-import-only-globals-c095

Jun 5, 2026

Commits on May 31, 2026

fix: flag import-only custom pickle globals
mldangelo-oai
committed

Commits on Jun 2, 2026

fix: review import-only pickle globals exactly
mldangelo-oai
committed

Commits on Jun 4, 2026

Merge remote-tracking branch 'origin/main' into HEAD
mldangelo-oai
committed
fix: harden import-only global review
mldangelo-oai
committed
fix: preserve trusted optional pickle references
mldangelo-oai
committed
fix: trust Python 3.13 pathlib pickle aliases
mldangelo-oai
committed
fix: preserve invoked global review coverage
mldangelo-oai
committed
fix: preserve import review evidence
mldangelo-oai
committed
fix: harden import-only global trust checks
mldangelo-oai
committed
Merge remote-tracking branch 'origin/main' into mdangelo/codex/fix-picklescan-import-only-globals-c095
mldangelo-oai
committed
fix: preserve trusted standalone pickle references
mldangelo-oai
committed
fix(picklescan): harden import origin review
mldangelo-oai
committed
test: preserve unresolved origin warning precedence
mldangelo-oai
committed
fix: harden import-only origin validation
mldangelo-oai
committed
fix: trust isolated package environments
mldangelo-oai
committed
fix: recognize isolated package origins
mldangelo-oai
committed
fix: close import-only pickle bypasses
mldangelo-oai
committed
fix: preserve pickle import origin checks
mldangelo-oai
committed
test: isolate trusted dill origin
mldangelo-oai
committed
Merge remote-tracking branch 'origin/main' into mdangelo/codex/fix-picklescan-import-only-globals-c095
mldangelo-oai
committed
Merge remote-tracking branch 'origin/main' into mdangelo/codex/fix-picklescan-import-only-globals-c095
mldangelo-oai
committed
fix(picklescan): trust only active package overlays
mldangelo-oai
committed
Merge remote-tracking branch 'origin/main' into mdangelo/codex/fix-picklescan-import-only-globals-c095
mldangelo-oai
committed
fix(picklescan): detect BUILD attribute hook execution
mldangelo-oai
committed
fix(picklescan): preserve unresolved framework rebuilds
mldangelo-oai
committed
Merge remote-tracking branch 'origin/main' into mdangelo/codex/fix-picklescan-import-only-globals-c095
mldangelo-oai
committed
fix(picklescan): close import origin bypasses
mldangelo-oai
committed
fix(picklescan): honor effective import loaders
mldangelo-oai
committed
Merge remote-tracking branch 'origin/main' into mdangelo/codex/fix-picklescan-import-only-globals-c095
mldangelo-oai
committed

Commits on Jun 5, 2026