fix(spec,runtime): 槽契约账本越过 `CoreServiceName`，`/security` 不再把未校验输入交给安全服务 (#4127) - #4202

Merged

os-zhuang merged 2 commits into

mainfrom

claude/dispatcher-storage-upload-typeerror-0exbcb-b3

Jul 30, 2026

Commits on Jul 30, 2026

fix(spec,runtime): the slot->contract ledger extends past `CoreServiceName`, and `/security` stops passing unvalidated input to the security service (#4127)
claude
committed
docs(permissions): document the accepted `status` filter values on /security/suggested-bindings (#4127)
claude
committed