fix: close the v0.22.1 re-audit high-severity findings (HI-01..HI-10) - #87

Merged

CodeWithJuber merged 5 commits into

claude/parallel-solving-3dc0ji

Jul 19, 2026

Commits on Jul 19, 2026

security(guards): block shell writes to protected paths; harden git-reader detection; cover NotebookEdit/WebFetch/MCP (HI-06, HI-07, HI-08)
claude
committed
b31dd21
fix(verify): run all detected suites; bind provenance to code state; honest spawn/metrics classification (HI-01, HI-02, ME-01, ME-02, ME-04)
claude
committed
f37a2f0
fix(gate): bind evidence to final code state; detect pre-dirty edits; test-file movement is not proof (HI-02, HI-03, HI-04)
claude
committed
99eb57c
fix(settings,init,installer): ownership-safe uninstall; abort init on profile persist failure; safer symlink/uninstall transactions (HI-05, HI-09, HI-10)
claude
committed
3ee3fb9
docs(changelog): record the HI-01..HI-10 high-severity audit fixes
claude
committed
520c0ad