Renn F 6f3ba2f42e fix(bash-guard): block package-env mutations targeting /app (all providers) ...

An agent that ran `uv sync` / `pip install` against /app rebuilt the
orchestrator's MCP-gateway venv (/app/.venv) — breaking its own gateway tools
(every roboco-flow/-do/-git verb), stranding it, and getting its task reaped.
Deny package-mutation verbs (uv sync/lock/add/remove, uv pip, pip install)
whose target resolves to /app (cd /app, --project/--directory /app, /app/.venv,
UV_PROJECT_ENVIRONMENT=/app). Placed outside the ROBOCO_GUARD_SKIP_GIT gate so
it fires for every provider — the Claude PreToolUse hook and the grok exfil
hook alike. Reads of /app and workspace installs are untouched.

2026-06-20 22:51:02 +02:00

..

__init__.py

fix(bash-guard): deny internal curl to orchestrator/localhost

2026-05-03 06:11:38 +02:00

test_bash_guard.py

fix(bash-guard): block package-env mutations targeting /app (all providers)

2026-06-20 22:51:02 +02:00