P0 security: contain the implement agent against untrusted issue text#9

Merged

vaderyang merged 5 commits into

mainfrom

feat/untrusted-input-containment

Jun 12, 2026

Commits on Jun 11, 2026

feat(security): contain the implement agent — deny network egress + strip tokens

Vader Yang
and
claude
committed
feat(security): frame issue/review content as untrusted data in agent prompts

Vader Yang
and
claude
committed
feat(security): maintainer-dispatch gate — don't auto-implement stranger issues

Vader Yang
and
claude
committed
docs(security): threat model + prompt-injection eval (improvement-plan 0.2-1)

Vader Yang
and
claude
committed
docs(config-reference): document .triage.auto_dispatch + .implement.allow_network

Vader Yang
and
claude
committed