feat(security): harden query, serve, and validate read surfaces#180

Merged

SutuSebastian merged 7 commits into

mainfrom

fix/security-hardening-wave1

Jun 11, 2026

Commits on Jun 11, 2026

feat(security): harden query, serve, and validate read surfaces
SutuSebastian
committed
harden: read-surface PR parity, bind policy, and ship docs
SutuSebastian
committed
harden: validate containment depth, loopback range, and test coverage
SutuSebastian
committed
feat(agents): harden-pr probes, ledger, and recall benchmark harness
SutuSebastian
committed
chore(agents): drop harden-pr eval probes after validation
SutuSebastian
committed
fix(serve): normalize bracketed IPv6 bind host for Node listen
SutuSebastian
committed
harden: read-surface PR parity, tests, and wave1 plan retirement
SutuSebastian
committed