Hermes Agent 91cc37bcf6 fix(guard): inspect checkout placement operands ...

Classify git clone and worktree add operands so HOME-valued environment assignments, sources, references, templates, and metadata do not impersonate checkout destinations. Preserve both forms of clone --separate-git-dir as real placement targets and distinguish shell words, command boundaries, and redirections in the existing quote-aware normalized stream.

Deliberate fail-closed residual: unknown future Git options with a separate following word are not adjudicated as source-only. Their value remains a possible placement, so a HOME-shaped value blocks rather than silently creating a bypass. Relative destinations whose effective path depends on cwd remain out of scope in #1197.

2026-08-13 05:55:33 -05:00

..

41-plugin-host.md

fix: rename all packages from @mosaic/* to @mosaicstack/*

2026-04-04 21:43:23 -05:00

387-updater-wrapper-gitea-20260404.md

fix: rename all packages from @mosaic/* to @mosaicstack/*

2026-04-04 21:43:23 -05:00

462-fed-m3-04-scope-service.md

feat(#462): add federation scope enforcement service (#672)

2026-06-24 23:22:46 +00:00

536-wrapper-login-pin.md

Fix Gitea wrapper login resolution (#538)

2026-06-12 02:34:18 +00:00

544-agent-reflection-loop.md

feat(agent-reflection): durable kernel — reflection.v1 capture + risk-floor + Phase-0 (#545)

2026-06-16 21:35:40 +00:00

559-560-wrapper-eval-login-20260620.md

fix(framework/tools): wrapper hardening — TLS validation, cred-path fallback, no-CI fast-exit (#551)

2026-06-20 10:16:38 +00:00

561-python-is-python3.md

docs(bootstrap): add python-is-python3 to agent-host prerequisites (#694)

2026-07-03 09:38:40 +00:00

631-reseed-preserves-fleet.md

fix(install): preserve user fleet data on re-seed + refresh active units (CRITICAL) (#632)

2026-06-22 21:38:09 +00:00

633-comms-block-runbook.md

feat(fleet): comms-block emitter + FLEET-LAUNCH runbook (#633) (#638)

2026-06-22 22:23:50 +00:00

672-fleet-personas-timeout.md

fix(fleet): raise fleet-personas.spec timeout to 30s (mirror #665) (#677)

2026-06-24 22:16:49 +00:00

703-wrapper-interactive-auth.md

Fixes #703 (#705)

2026-07-12 20:49:43 +00:00

747-wsa-dehardcode.md

De-hardcode orchestrator and interaction agent names (#748)

2026-07-13 18:59:27 +00:00

751-native-kanban-canon.md

docs(#751): Publish native Kanban/SOT canon (#752)

2026-07-14 17:08:09 +00:00

753-kbn010-threat-gate.md

docs(#753): clear KBN-010 threat and schema gate (#765)

2026-07-14 21:46:44 +00:00

755-mos-logical-identity-fencing.md

feat(mos): add logical identity connector fencing (#757)

2026-07-14 23:33:06 +00:00

756-official-discord-plugin.md

Fixes #756 (#763)

2026-07-14 20:26:15 +00:00

758-fcm-m1-002-shared-role-resolution.md

feat(fleet): add shared role semantics (#768)

2026-07-15 00:53:47 +00:00

758-fcm-m1-003-example-profile-dispositions.md

test(fleet): validate shipped artifact dispositions (#770)

2026-07-15 01:37:12 +00:00

758-fcm-m2-002-fleet-agent-crud.md

feat(fleet): add generation-guarded agent CRUD (#773)

2026-07-15 12:03:05 +00:00

758-fcm-m3-001-local-reconciler.md

feat(fleet): reconcile local roster state (#785)

2026-07-15 15:03:31 +00:00

758-fcm-m3-002-reconciler-lifecycle-gates.md

test(fleet): cover reconciler lifecycle gates (#786)

2026-07-15 16:46:13 +00:00

758-fcm-m4-001-v1-v2-migrator.md

feat(fleet): add reviewed v1-to-v2 migration preview (#788)

2026-07-16 13:11:16 +00:00

771-kbn101-db-role-split.md

docs(kbn): freeze KBN-101 database role split contract (#774)

2026-07-15 13:34:29 +00:00

791-upgrade-config-protection.md

feat(fleet): mosaic fleet regen — regenerate roster-derived projections (PR3 of #791) (#813)

2026-07-17 03:17:55 +00:00

804-install-unknown-flags.md

fix: reject unknown installer arguments (#825)

2026-07-17 22:16:51 +00:00

807-glpi-partial-content.md

fix(glpi): accept HTTP 206 in list wrappers (#807) (#810)

2026-07-16 22:47:58 +00:00

808-agent-send-sender-identity.md

fix(tmux): correct cross-socket sender identity (#808) (#809)

2026-07-16 22:47:25 +00:00

812-pr-review-comment.md

fix(framework): durable Gitea comment posting in pr-review.sh via REST + read-back verify (#812) (#852)

2026-07-20 06:45:48 +00:00

824-mosaic-skill-cli.md

feat(mosaic): add secure skill registration CLI (#826)

2026-07-17 23:45:35 +00:00

828-lease-broker.md

feat(mosaic): add authenticated external lease broker (#836)

2026-07-18 03:12:23 +00:00

829-mutator-gate.md

feat(mosaic): WI-2 mutator-class guard for directive-freshness (#837)

2026-07-18 05:51:58 +00:00

830-compaction-revoke.md

WI-3 (#830): compaction observers → revoke + D4 same-PID generation auto-revoke (#842)

2026-07-19 19:46:28 +00:00

832-receipt-challenge-protocol.md

WI-5 #832: Receipt-challenge protocol (compaction-refresh, milestone 188) (#845)

2026-07-19 23:18:56 +00:00

833-constrained-recovery-command.md

WI-6 (#833): constrained recovery command + mosaic-context-refresh skill wrapper (#846)

2026-07-20 03:33:00 +00:00

838-broker-acceptance-flake.md

fix(#838): bound broker reply deadlines + fail-close empty-read; de-flake acceptance harness (#839)

2026-07-18 07:15:50 +00:00

1000-rm-61-ci-contract-exemption.md

RM-61: prove ci-postgres teardown discrimination (#1033)

2026-08-01 14:54:04 +00:00

1019-zero-timeout-harness.md

test(ci): make queue guard harness deterministic (#1062)

2026-08-05 21:49:44 +00:00

1043-pane-git-identity.md

fix(fleet): propagate roster git identity (#1073)

2026-08-07 07:07:45 +00:00

1098-framework-shell-portability.md

fix(fleet): make framework shell assertions SIGPIPE-safe (#1100)

2026-08-07 08:21:20 +00:00

1099-pipefail-sweep.md

fix(shell): remove wake validation pipe hazards

2026-08-07 06:13:47 -05:00

1150-pi-goal-extension.md

feat(pi): add persistent Mosaic /goal controller (#1152)

2026-08-10 22:54:43 +00:00

1174-wrapper-guard-round10.md

fix(guard): inspect checkout placement operands

2026-08-13 05:55:33 -05:00

2026-06-20-fleet-cli-local-canary.md

refactor(fleet): rename tmux socket mosaic-factory → mosaic-fleet (#630)

2026-06-22 21:08:43 +00:00

2026-06-20-fleet-release-hardening.md

fix(fleet): harden operator sends for release (#565)

2026-06-20 20:41:11 +00:00

bug-196-admin-redirect.md

fix(web): admin page role check — stop false redirect to /chat (#203)

2026-03-17 02:38:25 +00:00

BUG-CLI-scratchpad.md

chore: fix prettier formatting on scratchpad files

2026-03-19 20:18:59 -05:00

ci-docker-publish-20260330.md

fix: rename all packages from @mosaic/* to @mosaicstack/*

2026-04-04 21:43:23 -05:00

cli-unification-20260404.md

docs: finalize CLI unification mission at mosaic-v0.0.24 (#424)

2026-04-05 14:54:48 +00:00

f3-m3-update-reseed.md

feat(mosaic): mosaic update re-seeds framework + relaunches agents (R13) (#610)

2026-06-22 03:34:05 +00:00

f4-matrix-connector.md

feat(fleet): F4 Phase 2a — Matrix CS-API connector client + factory (#618)

2026-06-22 16:48:17 +00:00

fcm-m2-001-generated-env-boundary.md

feat(fleet): enforce generated environment boundary (#772)

2026-07-15 08:40:32 +00:00

fcm-m5-001-fleet-config-operator-docs.md

docs(fleet): add operator configuration guide (#789)

2026-07-20 05:22:25 +00:00

FED-M3-05-list-verb.md

feat(#462): add federation list verb (#682)

2026-06-25 02:15:17 +00:00

FED-M3-07-capabilities.md

feat(#462): add federation capabilities verb (#674)

2026-06-24 21:39:56 +00:00

FED-M3-09-query-source.md

feat(#462): add federation query source routing (#673)

2026-06-24 21:39:45 +00:00

fix-ci-migrations-20260330.md

fix(db): add missing 0001_cynical_ultimatum to Drizzle migration journal

2026-03-30 21:09:34 -05:00

fix-turbo-env-passthrough.md

fix(ci): pass DATABASE_URL through Turbo to test tasks

2026-03-30 22:02:37 -05:00

fleet-cli-local-canary-review-fixes.md

feat(fleet): add local canary CLI (#563)

2026-06-20 17:49:01 +00:00

fleet-comms-onboarding.md

feat(fleet): onboarding-injection — comms cheat-sheet + peer roster per agent (#621)

2026-06-22 17:54:54 +00:00

fleet-enhancer-floor.md

feat(fleet): enhancer role + two-agent floor (orchestrator + enhancer) (#615)

2026-06-22 13:15:59 +00:00

fleet-observability-phase2.md

refactor(fleet): rename tmux socket mosaic-factory → mosaic-fleet (#630)

2026-06-22 21:08:43 +00:00

fleet-polish-bundle.md

fix(fleet): boot-survival symmetry — disable-on-remove + add-enable + init-R5 (#612)

2026-06-22 08:12:58 +00:00

fleet-standup-fixes.md

refactor(fleet): rename tmux socket mosaic-factory → mosaic-fleet (#630)

2026-06-22 21:08:43 +00:00

gateway-install-ux-20260404.md

fix(mosaic): resumable gateway install + prominent admin token (#393)

2026-04-05 03:19:07 +00:00

gateway-security-20260313.md

fix: rename all packages from @mosaic/* to @mosaicstack/*

2026-04-04 21:43:23 -05:00

git-wrapper-rollup-20260526.md

fix(mosaic-tools): roll up Gitea and Woodpecker wrapper fixes (#524)

2026-05-26 20:56:09 +00:00

h1-heartbeat-readiness.md

feat(fleet): classify agent readiness in fleet ps (#649)

2026-06-24 05:55:47 +00:00

h1b-pane-idle-signal.md

fix(fleet): derive pane idle from window activity fallback (#651)

2026-06-24 06:37:45 +00:00

h2-readiness-available.md

fix(fleet): report idle agents as available, reserve stuck for genuine blocks (#653)

2026-06-24 13:58:22 +00:00

harness-20260321.md

chore: bootstrap Harness Foundation mission (Phase 9) (#289)

2026-03-21 20:10:48 +00:00

install-ux-hardening-20260405.md

docs: close out install-ux-hardening mission (#434)

2026-04-05 19:19:54 +00:00

issue-766-exact-fleet-comms.md

fix(fleet): enforce exact comms authority (#787)

2026-07-16 00:32:23 +00:00

m3-001-provider-adapter.md

fix: rename all packages from @mosaic/* to @mosaicstack/*

2026-04-04 21:43:23 -05:00

macp-oc-bridge-20260330.md

fix(oc-plugin): replace Pi-direct with MACP controller bridge in runTurn

2026-03-30 10:33:32 -05:00

ms-792-fleet-enoent-installer.md

fix(#792): fleet roster ENOENT actionable exit + installer heading printf (#818)

2026-07-17 21:36:36 +00:00

mvp-20260312.md

docs(federation): M3 mission planning — 14-task decomposition (#504)

2026-04-24 01:13:40 +00:00

north-star-doctrine.md

docs(fleet): consolidate north-star doctrine (budget + control plane + identity) (#629)

2026-06-22 21:08:41 +00:00

p5-003-telegram-plugin.md

fix: rename all packages from @mosaic/* to @mosaicstack/*

2026-04-04 21:43:23 -05:00

p5-004-authentik-sso.md

fix: rename all packages from @mosaic/* to @mosaicstack/*

2026-04-04 21:43:23 -05:00

p5-overlay-composer.md

feat(mosaic): P5 — overlay composer (compose-contract + *.local overlays) (#605)

2026-06-22 02:16:05 +00:00

p6-docs-compliance-alpha.md

feat(framework): P6 — docs + compliance matrix + resident-budget CI (#607)

2026-06-22 02:20:35 +00:00

p8-001-sso-providers.md

fix: rename all packages from @mosaic/* to @mosaicstack/*

2026-04-04 21:43:23 -05:00

p8-009-tui-slash-commands.md

fix: rename all packages from @mosaic/* to @mosaicstack/*

2026-04-04 21:43:23 -05:00

p8-010-command-registry.md

feat(gateway): CommandRegistryService + CommandExecutorService (P8-010) (#178)

2026-03-16 02:10:31 +00:00

p8-012-agent-provider-commands.md

feat(gateway): /agent, /provider, /mission, /prdy, /tools commands (P8-012) (#181)

2026-03-16 02:50:18 +00:00

p8-016-tool-hardening.md

feat(gateway): tool path hardening + sandbox escape prevention (P8-016) (#177)

2026-03-16 02:02:48 +00:00

p8-019-verify.md

feat: verify Phase 8 platform architecture + integration tests (P8-019) (#185)

2026-03-16 03:43:42 +00:00

pr-merge-message-field.md

feat(pr-merge): preserve linked authors in squash messages (#1066)

2026-08-06 05:36:59 +00:00

rm-01-reproducible-checkout.md

RM-01: reproducible checkout — the pre-push gate fails on code, not environment (#1027)

2026-08-01 00:50:12 +00:00

rm-03-queue-guard.md

fix(rm-03): make CI queue guard fail on asserted non-readiness (#1032)

2026-08-01 18:55:26 +00:00

t_5aab9cc8-pr-merge-eval-injection.md

fix(mosaic-tools): roll up Gitea and Woodpecker wrapper fixes (#524)

2026-05-26 20:56:09 +00:00

t_301e4e3b-pr-merge-gitea-empty-uid.md

fix(mosaic-tools): roll up Gitea and Woodpecker wrapper fixes (#524)

2026-05-26 20:56:09 +00:00

t-a292e96f-gitea-pr-metadata.md

fix(framework/tools): eval injection, broken JSON, tmpfile leak (#549)

2026-06-18 21:35:32 +00:00

task-mission-ownership-20260313.md

fix: rename all packages from @mosaic/* to @mosaicstack/*

2026-04-04 21:43:23 -05:00

tess-20260712.md

feat(tess): wire durable interaction surfaces (#732)

2026-07-13 10:05:29 +00:00

tess-m1-002-provider-registry.md

feat: add Tess runtime provider registry (#722)

2026-07-12 23:53:54 +00:00

tess-m1-003-fleet-provider.md

feat(tess): add roster-bound tmux fleet provider (#724)

2026-07-13 00:59:24 +00:00

tess-m1-obs-001.md

feat(tess): add safe runtime observability (#726)

2026-07-13 01:29:18 +00:00

tess-m1-sec-001.md

fix(tess): enforce command authorization approvals (#718)

2026-07-12 23:18:01 +00:00

tess-m1-sec-004-discord-ingress.md

feat(#707): secure Discord service ingress (#716)

2026-07-12 23:18:29 +00:00

tess-m1-sec-006-session-gc-scope.md

fix(#707): scope session GC retention (#720)

2026-07-13 00:44:19 +00:00

tess-m2-001-pi-service.md

feat(tess): add configurable Pi interaction service (#728)

2026-07-13 02:59:27 +00:00

tess-m2-002-durable-state.md

feat(tess): persist durable session state (#729)

2026-07-13 05:14:11 +00:00

tess-m4-001-mos-coordination.md

docs(tess): remediate M5 qualification findings (#750)

2026-07-13 19:59:38 +00:00

tess-m4-003-operator-plugins.md

feat(memory): add operator retrieval plugin (#736)

2026-07-13 12:44:31 +00:00

tools-md-seeding-20260411.md

fix(mosaic): seed TOOLS.md from defaults on install (#458)

2026-04-12 02:02:21 +00:00

update-checker-package-20260404.md

fix: rename all packages from @mosaic/* to @mosaicstack/*

2026-04-04 21:43:23 -05:00

yolo-runtime-initial-arg-20260411.md

docs(scratchpad): finalize yolo runtime hotfix evidence (#456)

2026-04-11 17:14:00 +00:00