Advance the task CAS revision when accepting a pending workspace choice so
superseded retries cannot replace newer intent. Preserve active run roots.
Validate physical source trust before copying, admission and publication,
including retained readers and standard runs without a saved policy. Defer
isolation proof until all checks pass. Disable configured and builtin host
provisioning for low-trust sandbox worktree creation, reuse and rebuild.
Recognize primary separate Git storage without probing unrelated company
history, and document workspace run-log measurements and policy semantics.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Retain old physical owners before workspace source mutation, keep privacy history under the shared root fence, and isolate automatic file-availability failures. Skip unrelated invalid paths while retaining strict selected-root checks.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Resolve repository publishers by physical provenance instead of repository name. Check file APIs against retained and current folder sources, and preserve explicit child source overrides before parent binding inheritance.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Keep task project environment and trust separate from workspace source configuration. Authorize channel creation against locked endpoint defaults, realize first native chat worktrees safely, and enforce source authorization on legacy PATCH.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Preserve task workspace finalization timing in the extracted runtime module. Separate source workspace write policy from task reassignment and retain board assignee context through chat defaults.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
