Release 0.4.x: file-write enforcement + hardening (security) - #40

Merged

FvdHMBAI merged 13 commits into

mainfrom

Aug 16, 2026

Commits on Aug 16, 2026

fix(security): enforce on Write/Edit/MultiEdit, not just Bash (v0.4.0)

Frederik
and
claude
committed
18bc663
merge: sync main (0.3.3 + trial + tar-slip) into develop before 0.4.0
Frederik
committed
6511224
fix(security): close custom-guard bypass in pre-edit (v0.4.1)

Frederik
and
claude
committed
9259d89
fix(guards): detect hyphenated Anthropic keys and standalone TS errors (v0.4.2)

Frederik
and
claude
committed
1b972fe
fix(security): block file-tool writes to .claude/settings.json (v0.4.3)

Frederik
and
claude
committed
52e12ae
harden(security): fail closed on missing guard function in pre-edit

Frederik
and
claude
committed
481dd67
harden(security): cover NotebookEdit, fix audit label (v0.4.3)

Frederik
and
claude
committed
20822b4
harden(security): cover configured GUARDRAIL_CUSTOM_GUARDS_DIR (v0.4.3)

Frederik
and
claude
committed
75bb6dc
harden(security): audit malformed-payload denies in pre-edit (v0.4.3)

Frederik
and
claude
committed
8aa7280
harden(security): canonicalize paths before matching (v0.4.3)

Frederik
and
claude
committed
5d87a0d
harden(security): fail-closed content extraction for non-string payloads (v0.4.3)

Frederik
and
claude
committed
ae0969b
test: add non-string content regression to pre-edit suite

Frederik
and
claude
committed
e5c0ab6
test: harden secret fixtures against shell inheritance (no var indirection)

Frederik
and
claude
committed
06f5ccf