fix: engine exec safety, safewrite adoption, flock session lock, docs truth - #201

Merged

Patel230 merged 14 commits into

mainfrom

fix/audit-sweep-2026-08

Aug 16, 2026

Commits on Aug 15, 2026

fix(engine): bound and observe git/validator subprocesses
Patel230
committed
c42dc17
fix(engine): remove dead shell-injection surface, deduplicate RunScript eval
Patel230
committed
2101801
fix(state): adopt safewrite for global settings and session state writes
Patel230
committed
ab820b4
fix(session): replace TOCTOU session lock with flock
Patel230
committed
e5c31c2
fix: surface dropped memory persists and config-setting failures
Patel230
committed
309d306
build: pin golangci-lint to v2.1.0 in Makefile, matching CI
Patel230
committed
06147e5
docs: describe actual Go toolchain, move planning docs to docs/plans/
Patel230
committed
545afac
docs(changelog): record audit sweep fixes under Unreleased
Patel230
committed
8cd1b36
test(cmd): regenerate root help golden for trace rename
Patel230
committed
bdacb17

Commits on Aug 16, 2026