Skip to content

Harden governed action plane and remediate security alerts#122

Merged
appatalks merged 5 commits into
mainfrom
wip/action-plane-containment-2026-07-12
Jul 13, 2026
Merged

Harden governed action plane and remediate security alerts#122
appatalks merged 5 commits into
mainfrom
wip/action-plane-containment-2026-07-12

Conversation

@appatalks

Copy link
Copy Markdown
Owner

Summary

  • harden the governed action plane, artifacts, provider broker, MCP/ACP, and local-first memory boundaries
  • remediate open CodeQL findings with parameterized SQLite reads, canonical CORS headers, static artifact disposition, safe DOM rendering, no server-side skill URL fetching, and final MCP spawn revalidation
  • update the standalone lockfile to audited dependency versions

Validation

  • python3 tools/test_static.py
  • python3 tools/test_phase0.py
  • python3 tools/test_phase1.py
  • python3 tools/test_phase2.py
  • python3 tools/test_phase2_runtime.py
  • python3 tools/test_phase2_consolidation.py
  • python3 tools/test_phase3.py
  • python3 tools/test_action_plane.py
  • python3 tools/test_skills_e2e.py
  • npm audit in standalone/ (0 vulnerabilities)

Comment thread core/js/gl-google.js Fixed
Comment thread core/js/lm-studio.js Fixed
Comment thread core/js/sessions.js Fixed
Comment thread tools/bridge/finalize.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread core/js/sessions.js Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread tools/bridge/config.py Fixed
Comment thread core/js/sessions.js Dismissed
Comment thread tools/bridge/config.py Dismissed
Comment thread tools/bridge/config.py Dismissed
Comment thread tools/bridge/config.py Dismissed
Comment thread tools/bridge/config.py Dismissed
Comment thread tools/bridge/config.py Dismissed
Comment thread tools/bridge/config.py Dismissed
Comment thread tools/bridge/config.py Dismissed
Comment thread tools/bridge/config.py Dismissed
Comment thread tools/bridge/config.py Dismissed
Comment thread tools/bridge/config.py Dismissed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants