Security hardening, case-path performance, and reliability fixes - #26

Merged

alxxjohn merged 10 commits into

mainfrom

hardening/security-perf-reliability

Jul 2, 2026

Commits on Jul 2, 2026

security: sandbox MCP config exec, restrict MCP paths, scope integration creds & plugin env, gRPC TLS

alxxjohn
and
claude
committed
282c8a5
cli+tooling: report ordering, signals+atomic writes, html format, logging, CI coverage & lint, hygiene

alxxjohn
and
claude
committed
d8d319e
perf+correctness: worker pool, response cache, retry, SDK timeout & panic fixes

alxxjohn
and
claude
committed
32a809a
merge: hot-path correctness + performance (worker pool, response cache, retry, SDK timeout/panic)
alxxjohn
committed
4bbd3c3
merge: security hardening (MCP sandbox, path restriction, cred/env scoping, gRPC TLS)
alxxjohn
committed
9be74fd
merge: CLI+tooling (report ordering, signals, atomic writes, html format, logging, CI coverage, hygiene)
alxxjohn
committed
74b9e09
test: update assertions for new extract-error message and concurrent security engine

alxxjohn
and
claude
committed
d7ccb65
docs: capture concurrency, MCP exec, gRPC TLS, and credential-egress behavior in repo knowledge

alxxjohn
and
claude
committed
08c92bb
test: relocate security unit tests under tests/ to satisfy layout check

alxxjohn
and
claude
committed
cb8fe29
security: set TLS MinVersion and use crypto/rand for retry jitter

alxxjohn
and
claude
committed
66fa127