feat(ai): AI-task reliability, robustness & security hardening (27 fixes)#1241

Open

ocervell wants to merge 38 commits into

Commits on Jul 1, 2026

fix(ai): fail closed when guardrail prompts are exhausted (H10) (#1242)

ocervell
and
claude
authored
fix(ai): make "allow this command" a true one-shot, not a session rule (H9) (#1243)

ocervell
and
claude
authored
fix(ai): make history trim/compact tool-pair-aware to avoid orphan tool messages (H2) (#1244)

ocervell
and
claude
authored
fix(ai): close the answer/timeout race and stop stale pending docs accumulating (M10) (#1245)

ocervell
and
claude
authored
fix(ai): default-safe target/path guardrail dimensions (M6) (#1246)

ocervell
and
claude
authored
fix(ai): token-count fallback when LLM usage missing (M5) (#1247)

ocervell
and
claude
authored
fix(ai): cap subagent recursion depth & per-turn fan-out (H4) (#1248)

ocervell
and
claude
authored
fix(ai): cover plain-chat & max-iter remote turns with pending docs (H5) (#1249)

ocervell
and
claude
authored
fix(ai): idempotency marker stops Celery redelivery replay (C3) (#1254)

ocervell
and
claude
authored
fix(ai): normalize encoded IPs before SSRF/metadata deny (M8) (#1253)

ocervell
and
claude
authored
fix(ai): surface/prevent persistence-less subagent spawns (M2) (#1252)

ocervell
and
claude
authored
fix(ai): 400s fail fast except orphan-tool repair (M4) (#1251)

ocervell
and
claude
authored
fix(ai): model-window-aware history trim budget (M3) (#1255)

ocervell
and
claude
authored
fix(ai): cap unbounded shell output into history (M1) (#1256)

ocervell
and
claude
authored
fix(ai): treat output-flag destinations as writes (M9) (#1257)

ocervell
and
claude
authored
fix(ai): give allow_all real session-wide scope vs one-shot allow (M12) (#1258)

ocervell
and
claude
authored
fix(ai): fix unsubstituted template vars + phantom tool in prompts (D1) (#1259)

ocervell
and
claude
authored
fix(ai): gate privileged add_finding types at the guardrail (M7) (#1260)

ocervell
and
claude
authored
refactor(ai): cheap fast-path for mode detection, LLM only when ambiguous (D4) (#1261)

ocervell
and
claude
authored
chore(ai): remove vestigial code (D3) (#1262)

ocervell
and
claude
authored

Commits on Jul 2, 2026

Commits on Jul 4, 2026

Commits on Jul 5, 2026