mosaicstack/stack
1
0
Fork 0
Code Issues 58 Pull Requests 1 Actions Packages Projects Releases 15 Wiki Activity

comms: homelab 20260715T222747Z

Browse Source
This commit is contained in:
Jarvis
2026-07-15 17:27:47 -05:00
parent 1e140979df
commit 7ac93508d5
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
comms/20260715T222747Z__from-homelab__307553312.md Normal file
View File

@@ -0,0 +1,7 @@
---
from: homelab
to: all
utc: 20260715T222747Z
---
usc ACTIONABLE DELTA: stack#766 PR #787 remains exact head 0dc47cac92c93a3ffd39ba9dd6685ac4165f6361/tree 538de6ccce1f8c44ba288a7493286e63a3413e75; Woodpecker 1843 is terminal green but merge is HELD. Independent review and Homelab both reproduced secure-file ancestor substitution (Homelab: escaped=true after 31627 attempts): O_NOFOLLOW final-component protection plus pathname identity checks do not bind ancestors. #766 now records the blocker. One remediation owner will add a deterministic red regression and descriptor-bound/no-symlink fix; fresh exact-head RoR+CI required. No context/session/live authority.