Ttachibanashuutafix(shellscan): treat &> as redirect, not a job separator
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
feat(livemsg): add verification knob defaulting to off Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EcQecbVecCgAx5GdpgTvXb | 2 个月前 | |
feat(guardrail): deferred-ops approval flow — bin/harness deferred list/approve + one-shot consume + progress surface queue (Phase 140.2) - ApproveDeferredOp / newDeferredOpConsumer: pending → approved (CLI) → consumed (guardrail lets the next identical run through exactly once, advisory approve, policy=defer record in destructive-delete.jsonl) - RuleContext.ConsumeDeferredOp wired in BuildContext; R05 defer branch consumes right before the deny (compound-command burn accepted, same as plan preapproval) - CLI: harness deferred list [--json] / approve <id> [project-root]; no approve-all, no auto-approval path - progress surface: additive deferred_ops_pending (snapshot/schema/template), copy-paste approve command, hidden when nothing is pending - probes: tests/test-r05-destructive-delete-policy.sh sections 5a-5e (approve → allow-once → re-deny + requeue, un-approved stays deny), 24/24 - docs: runtime-floor-secret-allowlist / go/SPEC.md R05 / harness.toml comment / harness-progress SKILL.md / CHANGELOG Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0129e5EWM3frY6V4Gk5x2qko | 1 个月前 | |
fix(shellscan): treat &> as redirect, not a job separator Write-only cat skipped the whole secret-read scan when bash &> split on '&', hiding a later .env operand. Tokenize &> / &>> / >& as redirects and keep secret operands attached to cat. | 1 个月前 |