bellman 675d9ddc78 Harden workspace path classification ...

Canonicalize absolute shell path operands before comparing them with the workspace root so symlink-expanded reads cannot be downgraded under workspace-write enforcement. Also resolves local clippy findings in the touched tools crate so targeted linting can run cleanly.\n\nConstraint: Task 1 scope is workspace/path scope enforcement only; do not mutate .omx/ultragoal.\nRejected: Editing shared path-scope regression tests | worker-3 owns that test coverage and the current tests already prove the contract.\nConfidence: high\nScope-risk: narrow\nDirective: Keep shell/file permission classification canonical-path based before permitting workspace-write execution.\nTested: ../scripts/fmt.sh --check; cargo test -p tools --test path_scope_enforcement -- --nocapture; cargo test -p tools given_workspace_write_enforcer_when_bash -- --nocapture; cargo check -p tools; cargo clippy -p tools --all-targets --no-deps -- -D warnings\nNot-tested: Full workspace clippy still has known unrelated runtime crate warnings outside this task scope.

2026-05-14 17:46:07 +09:00

..

src

Harden workspace path classification

2026-05-14 17:46:07 +09:00

tests

Keep G002 path-scope tests aligned with enforced denials

2026-05-14 17:33:47 +09:00

.gitignore

fix: auto compaction threshold default 200k tokens

2026-04-01 03:55:00 +00:00

Cargo.toml

feat: b6-http-proxy-v2 — batch 6

2026-04-07 15:52:30 +09:00