Renn F 55cc7cea4e [F076] say/dm: handler guard rejects all 4 no-comms roles, not just auditor ...

The say()/dm() defence-in-depth guard only rejected auditor, but CLAUDE.md
mandates the same no-agent-comms invariant for pr_reviewer (posts findings
on the PR), prompter and secretary (human-only, note + evidence). For those
three the manifest was the only gate, so a call bypassing the manifest
(direct API POST, test harness, future routing change) would not be refused
at the handler — admission depended on the agent's slug happening to be
absent from the channel/a2a matrix. Extend the guard to a _NO_COMMS_ROLES
frozenset (auditor + pr_reviewer + prompter + secretary), matching the
explicit role-frozenset gates on commit/notify/pitch/playbook/open_session.
Role-appropriate remediation per role. The claimed defence-in-depth now
covers 4 of 4 silent roles, not 1 of 4.

2026-06-28 18:02:08 +02:00

..

agent_sdk

Bunch of runtime fixes for MegaTask and other issues

2026-06-27 06:52:59 +02:00

agents

Feature/architectural conventions standard (#243)

2026-06-22 12:37:46 +02:00

api

[F029] websocket: remove broken /api/permissions/check loopback from channel stream

2026-06-28 17:52:14 +02:00

billing

[chore] Bump local LLM glm-5→glm-5.2 + swap Ollama fleet defaults off minimax

2026-06-28 02:02:33 +02:00

config

Feat/v0.13.0 (#270)

2026-06-26 01:43:08 +02:00

conventions

[F030] conventions: typescript-scoped custom rules now apply to .tsx files

2026-06-28 17:49:10 +02:00

db

Persist the PM-respawn counter across orchestrator restarts (#275)

2026-06-26 03:36:42 +02:00

enforcement

Chore: v1 removal gateway canonical (#46)

2026-06-03 06:35:03 +02:00

events

[beb8cae1] Type-gate tests/ under mypy — fix all errors and flip quality gate (#156) (#157)

2026-06-14 13:43:46 +02:00

foundation/policy

[feature] sync_branch dev verb — gate-level branch rebase (Phase B1)

2026-06-28 04:40:06 +02:00

gateway

[F076] say/dm: handler guard rejects all 4 no-comms roles, not just auditor

2026-06-28 18:02:08 +02:00

llm

[chore] remove all remaining type:ignore suppressions from tests/

2026-06-28 17:00:20 +02:00

mcp_servers

[F068][F069] mcp servers: classify all rejection shapes + envelope 404s

2026-06-28 17:16:37 +02:00

migrations

feat(content): migration for structured note columns + quick_context split

2026-06-21 01:51:48 +02:00

models

[chore] remove all remaining type:ignore suppressions from tests/

2026-06-28 17:00:20 +02:00

runtime

[F072] reaper: deadline docker inspect/exec + harden _check_health sweep

2026-06-28 17:59:08 +02:00

scripts

fix(bash-guard): block package-env mutations targeting /app (all providers)

2026-06-20 22:51:02 +02:00

services

[F078] release_executor: deadline every subprocess (git/make/gh/clone)

2026-06-28 17:56:03 +02:00

templates

100% Coverage

2026-05-06 21:02:31 +02:00

utils

fix(tests): make crypto tests hermetic with a self-supplied Fernet key

2026-06-22 13:04:26 +02:00

test_agents_config.py

Fix: agent workflow hardening (#70)

2026-06-05 16:35:22 +02:00

test_bootstrap.py

[beb8cae1] Type-gate tests/ under mypy — fix all errors and flip quality gate (#156) (#157)

2026-06-14 13:43:46 +02:00

test_config_properties.py

100% Coverage

2026-05-06 21:02:31 +02:00

test_enum_migration_parity.py

feat: in-path PR-review gate — per-cell + main reviewers (#229)

2026-06-20 09:27:29 +02:00

test_exceptions.py

Merge 'master' into 'dogfood feature branch' (smoke test run) (#82)

2026-06-08 03:27:45 +02:00

test_logging.py

fix(logging): host-side log fallback writes to ./data/logs, not a duplicate ./logs

2026-06-03 08:36:45 +02:00

test_no_deleted_tool_names.py

Chore: v1 removal gateway canonical (#46)

2026-06-03 06:35:03 +02:00

test_notification_dedup.py

[chore] remove all remaining type:ignore suppressions from tests/

2026-06-28 17:00:20 +02:00

test_toolchain_flag.py

fix(toolchain): type-annotate test helpers for the full mypy gate

2026-06-22 01:59:41 +02:00