DottaandPaperclip 4817df3e82 fix(workspaces): fence pending choices and sandbox source aliases ...

Advance the task CAS revision when accepting a pending workspace choice so
superseded retries cannot replace newer intent. Preserve active run roots.

Validate physical source trust before copying, admission and publication,
including retained readers and standard runs without a saved policy. Defer
isolation proof until all checks pass. Disable configured and builtin host
provisioning for low-trust sandbox worktree creation, reuse and rebuild.

Recognize primary separate Git storage without probing unrelated company
history, and document workspace run-log measurements and policy semantics.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-10-12 17:52:08 -05:00

..

scripts

perf(build): reuse a current Runner build in the server's prepare:runner-vendor step (#15926)

2026-10-12 11:25:24 -07:00

src

fix(workspaces): fence pending choices and sandbox source aliases

2026-10-12 17:52:08 -05:00

test-baselines

fix: use persisted state for lifecycle continuation and retry budgets (#13888)

2026-09-25 15:28:11 -07:00

CHANGELOG.md

…

package.json

perf(build): reuse a current Runner build in the server's prepare:runner-vendor step (#15926)

2026-10-12 11:25:24 -07:00

tsconfig.json

…

vitest.config.ts

fix: make accounting durable and synchronize cost reporting (#14997)

2026-10-06 22:26:48 -07:00