Repository navigation

Audit fixes (2026-10): literal pathspecs, export comments, loopback bind, special-char paths - #43

Merged

praxstack merged 11 commits into

mainfrom

fix/audit-2026-10

Oct 11, 2026

Merged

Audit fixes (2026-10): literal pathspecs, export comments, loopback bind, special-char paths#43
praxstack merged 11 commits into
mainfrom
fix/audit-2026-10

Commits on Oct 8, 2026
- fix(git): pass pathspecs verbatim after -- so special-char paths keep their own diff [AVCR-001]
  
  praxstack
  and
  claude
  committed
  022592b
- fix(export): include reviewer comments in unified review [AVCR-002]
  
  praxstack
  and
  claude
  committed
  4529da8
- fix(server): bind 127.0.0.1 by default, HOST env for Docker, publish loopback only [AVCR-005]
  
  praxstack
  and
  claude
  committed
  bd3ec1d
- fix(git): match paths literally and reject magic pathspecs [review: MAJOR-1]
  
  praxstack
  and
  claude
  committed
  91b58b6
- fix(export): match line comments to their exact file in both generators [review: MINOR-1]
  
  praxstack
  and
  claude
  committed
  a6ad3e9
- fix(web): allow [ ] ( ) { } $ in reviewed file paths [review: MINOR-2]
  
  praxstack
  and
  claude
  committed
  ec4d1da
- fix(docker): healthchecks probe 127.0.0.1 instead of localhost [review: MINOR-3]
  
  praxstack
  and
  claude
  committed
  0ecb0c6
- fix(export): make line-comment ids unique per file [review: codex-security P2]
  
  praxstack
  and
  claude
  committed
  79edb97
- fix(export): read only own file-comment keys [codex: Check ownership before reading file comments]
  
  praxstack
  and
  claude
  committed
  149edaf
- fix(server): show and open the configured bind address [codex: Open the configured bind address]
  
  praxstack
  and
  claude
  committed
  99e44be
Commits on Oct 11, 2026
- docs(audit): add 2026-10 audit reports
  
  praxstack
  and
  claude
  committed
  cdcdbaa

Commits

Commits on Oct 8, 2026

Commits on Oct 11, 2026