Repository navigation

Findings-catalogue fixes, part 2 (gateway, policy language, fetch, CLI, proxy, store) - #5

Merged

Harshith029 merged 19 commits into

mainfrom

catalogue-remaining

Oct 18, 2026

Merged

Findings-catalogue fixes, part 2 (gateway, policy language, fetch, CLI, proxy, store)#5
Harshith029 merged 19 commits into
mainfrom
catalogue-remaining

Commits on Oct 17, 2026
- fix(gateway): gate websockets, keep owners on refused DELETE, throttle re-checks, per-tenant SSE
  
  Harshith029
  and
  claude
  committed
  b50a170
- fix(authz): boolean literals, consistent numbers, depth limits, terse refusals
  
  Harshith029
  and
  claude
  committed
  011dc04
- fix(web_fetch): DNS off the event loop, an overall deadline, malformed hosts as errors
  
  Harshith029
  and
  claude
  committed
  412cafd
- fix(cli,config): strict booleans, unknown keys, empty env, scaffold folding, explicit azure
  
  Harshith029
  and
  claude
  committed
  2dfa2b3
- fix(proxy): cap structuredContent, start a session once, refuse control chars in addresses
  
  Harshith029
  and
  claude
  committed
  23c4e60
- fix(trust,store,manager): tuple trust keys, safe cancellation, bounded state, run accounting
  
  Harshith029
  and
  claude
  committed
  c6f8bd5
- fix(shield,classifier): survive backend outages; reuse the Azure client; exact labels
  
  Harshith029
  and
  claude
  committed
  903c705
- docs: make the docs and docstrings say what the code does
  
  Harshith029
  and
  claude
  committed
  c3b2e1e
- fix(downstream): follow tools/list pagination; approve the snapshot routes came from
  
  Harshith029
  and
  claude
  committed
  cb9f50c
- fix(sanitizer): strict iso_date and plain decimal_amount
  
  Harshith029
  and
  claude
  committed
  3ed5a5e
- test(ci): planted secret in a temp repo, a real 401, aligned action pins, uvloop pinned
  
  Harshith029
  and
  claude
  committed
  f9bca1d
- fix(observability,capabilities): name the tenant in security logs; report the running mode
  
  Harshith029
  and
  claude
  committed
  1f0e684
Commits on Oct 18, 2026
- fix(dashboard): show refused and failed runs; auto-play once on a fresh dashboard
  
  Harshith029
  and
  claude
  committed
  4ed0590
- fix(demo): custom pages win under real fetch; live example exits non-zero on no block
  
  Harshith029
  and
  claude
  committed
  eb6216b
- fix(demo): honour catalogue approvals in demo runs
  
  Harshith029
  and
  claude
  committed
  9069966
- fix(cli): check prints fingerprints in flag-only mode and lists approved findings
  
  Harshith029
  and
  claude
  committed
  3af1941
- fix(forensics,authz): record what declassified a result; warn on config shadowing a call field
  
  Harshith029
  and
  claude
  committed
  356ff5c
- docs(readme): list the limitations the catalogue found that are not quick fixes
  
  Harshith029
  and
  claude
  committed
  69d9038
- Merge remote-tracking branch 'origin/main' into catalogue-remaining
  Harshith029
  committed
  3572c0f

Commits

Commits on Oct 17, 2026

Commits on Oct 18, 2026