fix(trust): eliminate TOCTOU race in filter loading; harden CI trust bypass#2050

Open

rosschurchill wants to merge 2 commits into

rtk-ai:developfrom

rosschurchill:fix/c01-toctou-filter-trust

Commits on May 23, 2026

fix(C-01): read filter file once; hash+parse same buffer; harden CI trust bypass

rosschurchill
and
claude
committed
test(C-01): fix racy env-var tests; add check_trust_from_hash_with_store helper

rosschurchill
and
claude
committed