DottaandPaperclip 17c9b1fd62 fix(workspaces): validate prospective child source trust ...

Pass server-owned creation context before the child is saved. Validate the
creator run, sponsor and parent ancestry against the immutable boundary,
then verify current parent and prospective child policies. Preserve exact
saved task identity for ordinary selection and writes.

Add real database and authenticated HTTP regressions, including omitted
client policy, and update the plan and paired workspace maps.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-10-12 18:27:03 -05:00

..

scripts

perf(build): reuse a current Runner build in the server's prepare:runner-vendor step (#15926)

2026-10-12 11:25:24 -07:00

src

fix(workspaces): validate prospective child source trust

2026-10-12 18:27:03 -05:00

test-baselines

fix: use persisted state for lifecycle continuation and retry budgets (#13888)

2026-09-25 15:28:11 -07:00

CHANGELOG.md

fix: bound workspace Git scans (#11572)

2026-08-17 22:11:30 -05:00

package.json

perf(build): reuse a current Runner build in the server's prepare:runner-vendor step (#15926)

2026-10-12 11:25:24 -07:00

tsconfig.json

…

vitest.config.ts

fix: make accounting durable and synchronize cost reporting (#14997)

2026-10-06 22:26:48 -07:00