chore: rebase main and reconcile docs-first runtime changes - #113

Merged

mindfn merged 27 commits into

mainfrom

codex/rebase-main-sync-20260227

Feb 28, 2026

Commits on Feb 27, 2026

chore: rebase main and reconcile docs-first runtime changes
mindfn
committed
bcd2359
refactor(security): drop legacy impl shim for DefaultSecurityBoundary
mindfn
committed
9f71f4f
refactor(event): remove legacy impl shim exports
mindfn
committed
3cc7233
fix(agent): enforce security parity in step-driven and tool-loop paths
mindfn
committed
44969e6
fix(agent): honor step envelope risk in tool security checks
mindfn
committed
80dbe93
fix(builder): expose security-boundary injection for DareAgent
mindfn
committed
1490d89
fix(agent): normalize step outputs and policy-failure fallback paths
mindfn
committed
fedc715
fix(context): allocate retrieval budget only to active sources
mindfn
committed
0b68e4d
fix(agent): prevent metadata from overriding canonical policy keys
mindfn
committed
a8759c8
fix(ci): make design-doc-drift check independent of rg availability
mindfn
committed
bdc7426
fix(agent): fail fast invalid step-driven planner configuration
mindfn
committed
2d5db2e
fix(agent): preserve explicit None tool outputs in step-driven chaining
mindfn
committed
60c2370
fix(agent): harden step-driven security gates and plan-policy scope
mindfn
committed
3fe9be0
fix(agent): enforce step-driven planner invariant and wire approve-required flow
mindfn
committed
5804c5b
fix(agent): enforce approval gates for custom step executors
mindfn
committed
0223aa2
fix(agent): normalize approval backend exceptions as tool failures
mindfn
committed
10dce84
fix(agent): enforce tool hook governance for custom step executors
mindfn
committed
d989ed4
fix(agent): enforce retry approvals and deny short-circuit
mindfn
committed
5160bf6
fix(step-driven): enforce metadata approvals and improve retrieval packing
mindfn
committed
803ca1e
fix(context): honor knowledge reserve tokens in knowledge-only retrieval
mindfn
committed
ee1fbcf
fix(agent): run BEFORE_TOOL hook before approval resolution
mindfn
committed
c02d903
fix(agent,context): normalize deny status and guard overflowed numeric config
mindfn
committed
1f09d6b
fix(context): reject non-finite retrieval ratios in config
mindfn
committed
713f584

Navigation Menu

Uh oh!

chore: rebase main and reconcile docs-first runtime changes - #113

chore: rebase main and reconcile docs-first runtime changes#113
mindfn merged 27 commits into
mainfrom
codex/rebase-main-sync-20260227

Commits on Feb 27, 2026

chore: rebase main and reconcile docs-first runtime changes

refactor(security): drop legacy impl shim for DefaultSecurityBoundary

refactor(event): remove legacy impl shim exports

fix(agent): enforce security parity in step-driven and tool-loop paths

fix(agent): honor step envelope risk in tool security checks

fix(builder): expose security-boundary injection for DareAgent

fix(agent): normalize step outputs and policy-failure fallback paths

fix(context): allocate retrieval budget only to active sources

fix(agent): prevent metadata from overriding canonical policy keys

fix(ci): make design-doc-drift check independent of rg availability

fix(agent): fail fast invalid step-driven planner configuration

fix(agent): preserve explicit None tool outputs in step-driven chaining

fix(agent): harden step-driven security gates and plan-policy scope

fix(agent): enforce step-driven planner invariant and wire approve-required flow

fix(agent): enforce approval gates for custom step executors

fix(agent): normalize approval backend exceptions as tool failures

fix(agent): enforce tool hook governance for custom step executors

fix(agent): enforce retry approvals and deny short-circuit

fix(step-driven): enforce metadata approvals and improve retrieval packing

fix(context): honor knowledge reserve tokens in knowledge-only retrieval

fix(agent): run BEFORE_TOOL hook before approval resolution

fix(agent,context): normalize deny status and guard overflowed numeric config

fix(context): reject non-finite retrieval ratios in config

Commits on Feb 28, 2026

fix(context): catch ratio overflow during numeric coercion

fix(agent): handle step plan-tools and preserve approval deny status

fix(context): use active-source reserve and rebalance after ltm failure

fix(context): skip zero-budget retrieval sources