Stefan Andrei 886721d13a fix(security): guard brain-sync arithmetic against injected .brain-last-pull content; sanitize _GBRAIN_HOST ... The generated preamble bash fed the raw file content of ~/.gstack/.brain-last-pull into $(( )) — bash arithmetic evaluates array subscripts and command substitution, so a writable state file is an execution vector. It also interpolated the gbrain host string into the trusted status line unsanitized. Both are now normalized: .brain-last-pull content is reset to 0 unless purely numeric, and the host is clamped to a single line of hostname-safe characters. Regenerated all host outputs + re-blessed ship goldens. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-08-15 23:47:03 +03:00
..
preamble	fix(security): guard brain-sync arithmetic against injected .brain-last-pull content; sanitize _GBRAIN_HOST	2026-08-15 23:47:03 +03:00
browse.ts	v1.64.0.0 fix wave: full tracker audit — 90 fixes, 52 issues closed, ~50 community PRs absorbed (#2571)	2026-08-14 22:02:07 -07:00
composition.ts	v1.57.4.0 refactor(ethos): rename Boil the Lake principle to Boil the Ocean (#1912)	2026-06-08 05:41:07 -07:00
confidence.ts	v1.43.2.0 fix wave: post-Daegu paper-cut — 18 fixes, 28 bisect commits (#1642)	2026-05-21 21:21:07 -07:00
constants.ts	v1.57.10.0 feat: Codex review default-on across review/ship/plan/docs (#1966)	2026-06-10 21:14:58 -07:00
design.ts	v1.64.0.0 fix wave: full tracker audit — 90 fixes, 52 issues closed, ~50 community PRs absorbed (#2571)	2026-08-14 22:02:07 -07:00
dx.ts	feat: /plan-devex-review + /devex-review — DX review skills (v0.15.3.0) (#784)	2026-04-03 16:22:57 -07:00
gbrain.ts	v1.52.1.0 feat: brain-aware planning — 5 skills read structured gbrain context before asking (#1742)	2026-05-29 08:35:00 -07:00
index.ts	v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)	2026-08-15 09:37:04 -07:00
learnings.ts	v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)	2026-08-15 09:37:04 -07:00
make-pdf.ts	v1.64.0.0 fix wave: full tracker audit — 90 fixes, 52 issues closed, ~50 community PRs absorbed (#2571)	2026-08-14 22:02:07 -07:00
model-overlay.ts	feat(v1.10.1.0): overlay efficacy harness + Opus 4.7 fanout nudge removal (#1166)	2026-04-23 18:42:58 -07:00
preamble.ts	v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)	2026-08-15 09:37:04 -07:00
question-tuning.ts	v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)	2026-08-15 09:37:04 -07:00
redact-doc.ts	v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)	2026-08-15 09:37:04 -07:00
review-army.ts	v1.64.0.0 fix wave: full tracker audit — 90 fixes, 52 issues closed, ~50 community PRs absorbed (#2571)	2026-08-14 22:02:07 -07:00
review.ts	v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)	2026-08-15 09:37:04 -07:00
sections.ts	v1.54.0.0 feat: carve /ship into skeleton + on-demand sections (-59% always-loaded) (#1806)	2026-05-30 12:09:10 -07:00
tasks-section.ts	v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)	2026-08-15 09:37:04 -07:00
testing.ts	v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)	2026-08-15 09:37:04 -07:00
types.ts	v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)	2026-08-15 09:37:04 -07:00
utility.ts	v1.64.0.0 fix wave: full tracker audit — 90 fixes, 52 issues closed, ~50 community PRs absorbed (#2571)	2026-08-14 22:02:07 -07:00