Repository navigation

fix(policy): CHECK 15 safe-shape allowlist with fail-closed traversal - #378

Merged

brenpike merged 6 commits into

mainfrom

bugfix/check15-safe-shape-allowlist

Sep 25, 2026

Commits on Sep 25, 2026

fix(policy): classify CHECK 15 tracker refs against exact safe shapes
brenpike
committed
33059b5
fix(policy): fail CHECK 15 closed on discovery and read errors
brenpike
committed
464f20c
test(policy): pin CHECK 15 traversal canary and log the fix
brenpike
committed
0bb1b7a
fix(policy): stop CHECK 15 narrowing its input ahead of the fail-closed gate
brenpike
committed
8bc8ecf
docs(policy): state CHECK 15 guarantees as shipped
brenpike
committed
0d173d3
fix(policy): address review feedback
brenpike
committed
5628f16