Repository navigation

security: v0.3.6 fixes for secrets, emit subjects, governed mode and http-in - #11

Merged

cpoder merged 5 commits into

fix/shadow-secrets-dlq-http-in

Nov 6, 2026

Merged

security: v0.3.6 fixes for secrets, emit subjects, governed mode and http-in#11
cpoder merged 5 commits into
masterfrom
fix/shadow-secrets-dlq-http-in

Commits on Nov 6, 2026
- deps: rustls-webpki 0.103.16, webpki-roots 1.0.11; audit green again
  
  cpoder
  and
  claude
  committed
  9b12db7
- security: a run that is shown never holds a secret value
  
  cpoder
  and
  claude
  committed
  fb3ab18
- governed: replay and purge are human acts; the panel can approve with both tokens
  
  cpoder
  and
  claude
  committed
  59e0d9f
- runtime: a burst costs refusals, and a panic no longer ends a supervisor
  
  cpoder
  and
  claude
  committed
  542c876
- security: an emit subject cannot carry protocol
  
  cpoder
  and
  claude
  committed
  e7b0316