AIML-337: Add command allowlist validation for build and format commands#95

Merged

JacobMagesHaskinsContrast merged 27 commits intomainfrom

AIML-337_command-allowlist-validation

Jan 9, 2026

Commits on Dec 23, 2025

Planning: AIML-337 - Command allowlist validation

Jacob Mages-Haskins
and
claude
committed
AIML-337: Complete command validation module implementation

Jacob Mages-Haskins
and
claude
committed
AIML-337: Document learnings from bead contrast-ai-smartfix-action-gad
Jacob Mages-Haskins
committed
AIML-337: Integrate command validation into Config class

Jacob Mages-Haskins
and
claude
committed
AIML-337: Document learnings from bead contrast-ai-smartfix-action-8re
Jacob Mages-Haskins
committed
AIML-337: Add command allowlist security documentation

Jacob Mages-Haskins
and
claude
committed
AIML-337: Document learnings from bead wuv
Jacob Mages-Haskins
committed
AIML-337: Fix linting - remove unused import

Jacob Mages-Haskins
and
claude
committed
fix: resolve critical security vulnerabilities in command validation

Jacob Mages-Haskins
and
claude
committed
feat(test): add LLM-as-judge prompt for SmartFix PR reviews

Jacob Mages-Haskins
and
claude
committed
chore: ignore local development artifacts
Jacob Mages-Haskins
committed
chore: update beads and remove learnings from tracking
Jacob Mages-Haskins
committed
chore: remove docs/plans from tracking per .gitignore
Jacob Mages-Haskins
committed

Commits on Jan 7, 2026

AIML-337: Add beads for command allowlist updates
Jacob Mages-Haskins
committed

Commits on Jan 8, 2026

AIML-337: Add source parameter to _validate_command
Jacob Mages-Haskins
committed
chore: close bead ue9 - source parameter implementation complete
Jacob Mages-Haskins
committed
AIML-337: Add comprehensive tests for source parameter
Jacob Mages-Haskins
committed
chore: close bead ix3 - test coverage complete
Jacob Mages-Haskins
committed
AIML-337: Add sbt to command allowlist
Jacob Mages-Haskins
committed
chore: close bead t5c - sbt added to allowlist
Jacob Mages-Haskins
committed
AIML-337: Add error logging to command validation
Jacob Mages-Haskins
committed
chore: close bead 6t4 - error logging complete
Jacob Mages-Haskins
committed
chore: sync final bead state for AIML-337
Jacob Mages-Haskins
committed
chore: sync beads state - removed completed AIML-337 beads
Jacob Mages-Haskins
committed
AIML-337 Revise documentation since we changed this to trust commands set by humans that come in through the action's config file. In the future, we will put AI-generated commands through this all…
Jacob Mages-Haskins
committed
Merge branch 'main' into AIML-337_command-allowlist-validation
JacobMagesHaskinsContrast
authored
AIML-337: Update beads state for completed work
Jacob Mages-Haskins
committed