fix: deep review findings — security, engine, storage, tools - #195

Merged

Patel230 merged 16 commits into

mainfrom

fix/deep-review-findings

Aug 14, 2026

Commits on Aug 14, 2026

chore(eyrie): bump submodule to latest
Patel230
committed
72c9fe1
fix(wave1): safe isolated correctness + perf fixes
Patel230
committed
b391ce5
fix(engine): bounded system prompt, cached constitution, guarded channel sends
Patel230
committed
8924d86
fix(security): CORS, token redaction, auto-allow boundedness, Guardian hardening
Patel230
committed
81daf7a
refactor(engine): extract buildTurnOptions from agentLoop (H3)
Patel230
committed
e92d199
fix(storage): delete dead SQLite store, atomic index writes, compressor fix, rename pkg
Patel230
committed
2a49be6
fix(engine): errorlint fixes across packages + enable errorlint linter
Patel230
committed
9fa2eea
fix(sandbox): restrict container egress and typed tool schema
Patel230
committed
10c2f85
fix(session): coherence deep copy, refactorer doc, tool drift tests
Patel230
committed
5d463bc
fix(sandbox): proxy ServeHTTP routing, IPv4 binding, Go 1.26.6
Patel230
committed
1903aae
chore: revert Go version to 1.26.5 for CI compatibility
Patel230
committed
c21e370
chore: bump Go to 1.26.6 across all modules and CI workflows
Patel230
committed
400bf3e
chore: bump eyrie version to match submodule pin
Patel230
committed
f1bf25a
chore: update go.sum after eyrie version bump
Patel230
committed
f5d8a1b
chore: align generated go.work Go version with go.mod (1.26.6)
Patel230
committed
80cd1b0
chore: upgrade Docker base image to golang:1.26.6-alpine
Patel230
committed
41ac414