Borrow upstream security and correctness hardening - #24

Merged

Clondin merged 17 commits into

mainfrom

integration/upstream-hardening-2026-08-23

Aug 23, 2026

Commits on Aug 23, 2026

Borrow upstream security and correctness fixes
Clondin
committed
9a79fd8
Keep the playground's delete off a component the build ships (#109)

authored and
Clondin
committed
cf59362
Refuse a ref this server cannot resolve, instead of acting blind (#183)

beardthelion
authored and
Clondin
committed
132acb5
Keep a Bot from being named after a deployment route (#152)

beardthelion
authored and
Clondin
committed
c231146
fix: refuse the private-hosts switch in production (#185)

NathanTarbert
authored and
Clondin
committed
b50c817
Keep a rule about one action surface from refusing another

authored and
Clondin
committed
cb3c0d3
Answer the Docker socket on loopback, not on every address the host has

beardthelion
authored and
Clondin
committed
108f3b0
Say where the supervisor answers, everywhere that already says it for the computer

beardthelion
authored and
Clondin
committed
7686cde
Read the computer's port and timeouts through the fallback the browser limits use

authored and
Clondin
committed
45fea84
Read a thread nobody has run yet as empty, not as broken

Hotragn
authored and
Clondin
committed
a45196d
Say which of a connector's granted tools it no longer offers

Hotragn
authored and
Clondin
committed
013285f
Merge latest Kayco main into upstream hardening
Clondin
committed
059cc11
Close the statement that emptied the audit trail in silence (#148)

davidmckayv
authored and
Clondin
committed
43230c7
Keep the shipped Bot ports on loopback too
Clondin
committed
9dc07a3
Merge latest Kayco main into upstream hardening
Clondin
committed
64f0752
Format the upstream hardening additions
Clondin
committed
ea64788
Keep managed secrets and neutral policy fields in their lanes
Clondin
committed
675a0cc

Navigation Menu

Borrow upstream security and correctness hardening - #24

Borrow upstream security and correctness hardening#24
Clondin merged 17 commits into
mainfrom
integration/upstream-hardening-2026-08-23

Commits on Aug 23, 2026

Borrow upstream security and correctness fixes

Keep the playground's delete off a component the build ships (#109)

Refuse a ref this server cannot resolve, instead of acting blind (#183)

Keep a Bot from being named after a deployment route (#152)

fix: refuse the private-hosts switch in production (#185)

Keep a rule about one action surface from refusing another

Answer the Docker socket on loopback, not on every address the host has

Say where the supervisor answers, everywhere that already says it for the computer

Read the computer's port and timeouts through the fallback the browser limits use

Read a thread nobody has run yet as empty, not as broken

Say which of a connector's granted tools it no longer offers

Merge latest Kayco main into upstream hardening

Close the statement that emptied the audit trail in silence (#148)

Keep the shipped Bot ports on loopback too

Merge latest Kayco main into upstream hardening

Format the upstream hardening additions

Keep managed secrets and neutral policy fields in their lanes