mathiasandClaude Sonnet 5 062574dad8 fix(mcp): close claim-envelope bypass on value-only brain_edit diffs ...

Review of PR #136 found the gate trivially bypassable: touchesClaimEnvelope
only fired when old_str/new_str contained the claim-envelope FIELD NAME as a
substring, but a natural value-only diff (old_str: "asserted", new_str:
"guessed" against a claim_provenance line) never mentions the field name and
walked straight past it — notes.Edit wrote the invalid enum value to disk
with zero error.

Redesign the gate to be position-based instead of name-based: checkClaimEnvelope
now checks whether old_str is physically contained within the note's
frontmatter block (via the new frontmatterBlock helper), previews the exact
strings.Replace the real edit would perform, and validates the resulting
envelope before the edit is allowed to run. frontmatterScalars now builds on
the shared frontmatterBlock helper.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-09-23 10:21:53 +02:00

..

api

fix(api): frontmatter parser must not misparse indented list items as keys (#135)

2026-09-23 08:12:06 +00:00

audit

style: apply gofmt

2026-09-05 12:40:34 +02:00

brain

fix(brain): a one-word tunnel title must match the prose case-exactly

2026-09-17 00:08:40 +02:00

brainstore

fix: hyperguild brain write requires wing/hall, not legacy type/slug (#79)

2026-09-23 05:43:28 +00:00

capture

fix: hyperguild brain write requires wing/hall, not legacy type/slug (#79)

2026-09-23 05:43:28 +00:00

capturehttp

chore(lint): adopt the canonical .golangci.yml from infra/ci-templates

2026-09-05 14:42:59 +02:00

claim

feat(brain): validate the claim-property envelope on write (brain#21) (#102)

2026-08-22 08:58:34 +00:00

classification

feat(classification): data-sensitivity taxonomy + per-wing/repo tags (#50)

2026-06-22 22:42:05 +02:00

claudewatcher

feat(claudewatcher): exclude whole project directories from ingestion

2026-09-15 08:09:58 +02:00

embed

feat(brain): hybrid BM25 + pgvector retrieval (opt-in)

2026-05-18 23:11:25 +02:00

extract

fix(ingest): parse docmark's SSE-framed response, not bare JSON

2026-07-09 08:53:24 +02:00

frontmatter

fix(ingestion): decide quoting with YAML itself, not a colon heuristic (#90)

2026-08-18 00:10:11 +02:00

gitea

fix(gitea): WriteFile creates via POST, updates via PUT (real contents API)

2026-06-23 17:22:37 +02:00

graph

fix(search,graph): M4b wiki/entities/ → tier=knowledge

2026-05-25 18:49:37 +02:00

graphstore

feat(graph,graphstore): M2 parse tier+topic from frontmatter, persist via Upsert (infra#72)

2026-05-25 12:35:38 +02:00

graphsync

feat(graph): wire graphsync into MCP write/ingest/tunnel handlers

2026-05-23 15:21:33 +02:00

llm

feat(brain): add Gemini as brain_answer's third LLM tier

2026-08-30 14:43:25 +02:00

mcp

fix(mcp): close claim-envelope bypass on value-only brain_edit diffs

2026-09-23 10:21:53 +02:00

metrics

feat(ingestion): expose Prometheus /metrics for brain query latency

2026-05-22 07:13:05 +02:00

notes

feat(mcp): record and alert on a governance-file rewrite (#97) (#98)

2026-08-22 06:09:53 +00:00

oauth

feat(brain-mcp): OAuth 2.0 client_credentials flow for claude.ai

2026-05-18 22:21:54 +02:00

pipeline

feat(pipeline): feed the current source page into the extraction prompt (#106) (#132)

2026-09-23 05:45:47 +00:00

reranker

feat(brain_answer): Qwen3-Reranker cross-encoder filter (opt-in)

2026-05-18 22:55:46 +02:00

search

fix(text): truncate on rune boundaries, not byte offsets (#93)

2026-08-18 07:13:15 +02:00

session

style: apply gofmt

2026-09-05 12:40:34 +02:00

startupretry

chore(lint): adopt the canonical .golangci.yml from infra/ci-templates

2026-09-05 14:42:59 +02:00

textutil

fix(text): truncate on rune boundaries, not byte offsets (#93)

2026-08-18 07:13:15 +02:00

vectorstore

style: apply gofmt

2026-09-05 12:40:34 +02:00

watcher

fix(watcher): never walk into raw/rejected/ — brain_reject (closes #81)

2026-09-23 06:06:35 +00:00

webhook

fix(lint): check fmt.Fprintf errors in webhook handler (infra#190)

2026-07-09 08:29:39 +02:00

wiki

feat(pipeline): feed the current source page into the extraction prompt (#106) (#132)

2026-09-23 05:45:47 +00:00