feat(policy): content-first sanitizer + apply_patch coverage + web_fetch URL hardening - #6

Open

AtropinolTT wants to merge 9 commits into

NanmiCoder:mainfrom

AtropinolTT:feat/sanitizer-and-policy-hardening

Commits on Aug 17, 2026

docs(spec): general sanitizer + apply_patch + web_fetch URL hardening
AtropinolTT
committed
3437cdc
docs(spec): close review must-fix items (G1, G2, G3)
AtropinolTT
committed
b2148fc
docs(plan): implementation plan for sanitizer + apply_patch + URL hardening
AtropinolTT
committed
e750682
feat(paths): single-pass parser for apply_patch target paths
AtropinolTT
committed
21b8f56
feat(classifier): content-first credential redaction (Task 2/3 of spec)
AtropinolTT
committed
cc0b989
feat(classifier): pattern-redact every string at any depth; drop CONTENT_KEYS
AtropinolTT
committed
61e1e66
feat(policy): route apply_patch through hardDenyReason and assessTool
AtropinolTT
committed
70c1d44
feat(policy): hard-deny external URLs with credential-shaped query parameters
AtropinolTT
committed
b845c9b
fix(paths): satisfy noUncheckedIndexedAccess in extractApplyPatchPaths
AtropinolTT
committed
fe72191