This repository was archived by the owner on Aug 25, 2026. It is now read-only.

fix(app/security): restore trusted automation contracts - #156

Merged

nisavid merged 28 commits into

mainfrom

nisavid/fix-browser-security-context

Aug 18, 2026

Commits on Aug 17, 2026

fix(browser/security): propagate runtime context
nisavid
committed
13347b3
fix(computer-use/security): propagate authorization context
nisavid
committed
0668e25
fix(window-shell): support current app bundle
nisavid
committed
5a06bb8
fix(automation/security): harden runtime propagation
nisavid
committed
abab1b4
fix(browser/security): reject decoy patch anchors
nisavid
committed
af43f7f
fix(automation/security): reject executable decoy anchors
nisavid
committed
2009d98
test(launcher/security): cover endpoint preservation
nisavid
committed
e6c8be3
fix(window-shell/security): reject constructor decoys
nisavid
committed
23ae973
fix(browser/security): preserve for-await scanner context
nisavid
committed
cc2abd0
fix(window-shell/security): bind tray retention helper
nisavid
committed
74bc32b
fix(browser/security): scan nested template expressions
nisavid
committed
7da33af
fix(window-shell/security): correlate tray wrapper factory
nisavid
committed
122fb4e
fix(browser/security): distinguish statement block regexes
nisavid
committed
d7f2188
fix(browser/security): classify regex statement boundaries
nisavid
committed
1bafb08
fix(browser/security): validate staged client syntax
nisavid
committed
d5b2de9

Commits on Aug 18, 2026

test(browser): refresh official client smoke fixture
nisavid
committed
0950cb8
test(chrome): refresh official client smoke fixture
nisavid
committed
29791a3
fix(app/security): adapt current official bundle contracts
nisavid
committed
0f9e25e
test(security): avoid dynamic fixture construction
nisavid
committed
0e98442
fix(browser/security): install trusted RPC runtime
nisavid
committed
322a1ab
fix(nix): refresh official DMG hash
nisavid
committed
235a1ae
fix(nix): bypass default deb unpacking
nisavid
committed
efb3d01
fix(browser/security): reject Node builtin imports
nisavid
committed
98a53fc
fix(browser/security): pin trusted client bytes
nisavid
committed
ac3f2a7
test(browser/security): align trusted client fixtures
nisavid
committed
7d34e04
fix(nix/browser): preserve static node repl
nisavid
committed
771d8b1
fix(nix/browser): validate static node repl shape
nisavid
committed
cbeaede
fix(app/review): address automation findings
nisavid
committed
be98627