Block a user
PRD: Separate agent and bottle selection
Done in a455ed6.
- Space/Enter split: Space now toggles selection, Enter confirms and continues. Ctrl-D still works as a confirm-even-if-empty escape hatch.
- Bottle lineage: The picker…
Fix unescaped quotes/newlines in YAML and gitconfig emitters
Typed error taxonomy for supervise RPC dispatch
Harden CGI status-line parsing in git_http_backend
Add explicit timeouts to subprocess and HTTP calls in git-gate paths
Done in 1077621. Renamed to GIT_GATE_TIMEOUT_SECS and updated the comment to enumerate all three current users (git daemon --timeout/--init-timeout, access-hook subprocess, git http-backend…
Anchor relative Dockerfile path to build context
Add explicit timeouts to subprocess and HTTP calls in git-gate paths
Good call. Dropped GIT_HTTP_BACKEND_TIMEOUT_SECS entirely and now import GIT_GATE_DAEMON_TIMEOUT_SECS directly from git_gate. The test was updated to assert against the imported constant…
PRD: Multi-parent extends: for bottles
Add explicit timeouts to subprocess and HTTP calls in git-gate paths
PRD: Separate agent and bottle selection
Support multiple parents in bottle
extends:
Validate proposed egress config
Done — pushed in 9f9aa2e.
- Removed
load_routesfromegress_addon_core.py(definition +__all__) - Folded the three unique coverage cases (
empty_routes_list,full_route_shape_parses,…
Validate proposed egress config
load_routes is no longer used in any production code path — egress_apply.py, supervise_server.py, and egress_addon.py all call load_config now (this PR migrated the last few). It…
PRD: LOG_FULL egress logging credential redaction
PRD: Strengthen outbound exfiltration detection
PRD 0062: Supervisor override for egress token blocks
Add leveled severity and structured context to log wrappers
Strengthen outbound exfil detection: canaries, broadened known-value set, fragmentation-resistant matching
Empirical grounding for the ranking
A Jan 2026 large-scale study (Malicious Agent Skills in the Wild, arXiv:2602.06547) measured the real-world exfil…
Strengthen outbound exfil detection: canaries, broadened known-value set, fragmentation-resistant matching