fix(state): hardening — path-traversal validation + atomic save (v4.4.1)#3

Merged

LEEI1337 merged 4 commits into

mainfrom

fix/state-hardening

May 2, 2026

Commits on May 2, 2026

fix(state): validate session_id against path-traversal (TASK-2026-00679)

ai-engineering.at
and
claude
committed
fix(state): atomic save via tempfile + os.replace (TASK-2026-00680)

ai-engineering.at
and
claude
committed
fix(state): file-lock + RMW for concurrent shared-session writers (Codex finding)

ai-engineering.at
and
claude
committed
docs(state): document set()-after-mutation contract in get() (Codex review #2)

ai-engineering.at
and
claude
committed