fix: eliminate cubic candidate-set merge blowup (scan DoS, wardline-c797baf28b)#58

Closed

tachyon-beep wants to merge 35 commits into

mainfrom

fix/candidate-set-merge-dos

Commits on Jun 21, 2026

fix: stop repo gitignore hiding discovered source
John Morrissey
committed
fix: prevent stdlib submodule spoof taints
John Morrissey
committed
fix: reject MCP doctor caller filigree URLs
John Morrissey
committed
fix: harden rekey snapshot provenance
John Morrissey
committed
fix: preserve rust command shadow rebinds
John Morrissey
committed
fix: drop untrusted MCP sibling URLs
John Morrissey
committed
fix: bound delta caller seed expansion
John Morrissey
committed
fix: preserve explicit sibling loopback pins
John Morrissey
committed

Commits on Jun 22, 2026

fix: gate waiver_add entity_symbol resolve under MCP network policy

John Morrissey
and
claude
committed
fix: eliminate cubic candidate-set merge blowup (scan DoS)

John Morrissey
and
claude
committed

Commits on Jun 23, 2026

docs: consolidate Wardline release materials
John Morrissey
committed
fix(doctor): preserve filigree probe provenance
John Morrissey
committed
fix(filigree): soft-fail unsafe mint token reads
John Morrissey
committed
fix(scanner): bound l2 taint analysis work
John Morrissey
committed

Commits on Jun 24, 2026

fix(filigree): avoid response body amplification
John Morrissey
committed
fix(site): pin site-kit fetch in pages build
John Morrissey
committed
fix(mcp): advertise scan integration effects
John Morrissey
committed
fix(mcp): gate rekey cache-dir writes
John Morrissey
committed
fix(rust): isolate mount overlay prepass failures
John Morrissey
committed
fix(fingerprint): bind singleton suppressions to source body
John Morrissey
committed
fix(rust): surface invalid trust markers
John Morrissey
committed
fix(fingerprint): include full call spans
John Morrissey
committed
fix(gitignore): track wardline suppression state
John Morrissey
committed
fix(doctor): preserve resolved url provenance
John Morrissey
committed
fix(scan): guard explicit output paths
John Morrissey
committed
fix(scan): preserve raw hashes for CRLF files
John Morrissey
committed
fix(filigree): require confirmed legacy identity
John Morrissey
committed
fix(rust): tolerate invalid UTF-8 manifests
John Morrissey
committed
fix(install): repair mismatched filigree loopback urls
John Morrissey
committed
fix(rust): track args and captured format taint
John Morrissey
committed
fix(rust): normalize nested cfg predicates
John Morrissey
committed
fix(rust): avoid recursive inline module indexing
John Morrissey
committed
fix(discovery): keep nested Rust target modules
John Morrissey
committed
fix(install): avoid quadratic foreign fence scan
John Morrissey
committed
fix(filigree): redact diagnostic URLs
John Morrissey
committed