mathiasandClaude Sonnet 5 062574dad8 fix(mcp): close claim-envelope bypass on value-only brain_edit diffs ...

Review of PR #136 found the gate trivially bypassable: touchesClaimEnvelope
only fired when old_str/new_str contained the claim-envelope FIELD NAME as a
substring, but a natural value-only diff (old_str: "asserted", new_str:
"guessed" against a claim_provenance line) never mentions the field name and
walked straight past it — notes.Edit wrote the invalid enum value to disk
with zero error.

Redesign the gate to be position-based instead of name-based: checkClaimEnvelope
now checks whether old_str is physically contained within the note's
frontmatter block (via the new frontmatterBlock helper), previews the exact
strings.Replace the real edit would perform, and validates the resulting
envelope before the edit is allowed to run. frontmatterScalars now builds on
the shared frontmatterBlock helper.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-09-23 10:21:53 +02:00

..

brain_update_test.go

feat(mcp): brain_read + brain_edit, contained to the sync source (brain#4) (#96)

2026-08-18 18:14:05 +00:00

handlers_test.go

fix(watcher): never walk into raw/rejected/ — brain_reject (closes #81)

2026-09-23 06:06:35 +00:00

handlers.go

fix(watcher): never walk into raw/rejected/ — brain_reject (closes #81)

2026-09-23 06:06:35 +00:00

integration_test.go

feat(brain): add brain_answer and brain_classify MCP tools

2026-05-12 11:06:17 +02:00

pending_nudge_test.go

feat(brain): surface an aging review queue in brain_context (#82)

2026-08-18 00:37:48 +02:00

pending_nudge.go

feat(brain): surface an aging review queue in brain_context (#82)

2026-08-18 00:37:48 +02:00

server_test.go

fix(watcher): never walk into raw/rejected/ — brain_reject (closes #81)

2026-09-23 06:06:35 +00:00

server.go

fix(watcher): never walk into raw/rejected/ — brain_reject (closes #81)

2026-09-23 06:06:35 +00:00

tools_answer_test.go

fix(brain_answer): reranker is a filter, not a gate — fall back to BM25 when it keeps nothing

2026-06-16 22:53:02 +02:00

tools_answer.go

fix(brain_answer): reranker is a filter, not a gate — fall back to BM25 when it keeps nothing

2026-06-16 22:53:02 +02:00

tools_capture_test.go

chore(lint): adopt the canonical .golangci.yml from infra/ci-templates

2026-09-05 14:42:59 +02:00

tools_capture.go

feat(mcp): brain_read + brain_edit, contained to the sync source (brain#4) (#96)

2026-08-18 18:14:05 +00:00

tools_context_test.go

feat(mcp): wire brain_context tool

2026-05-25 18:53:14 +02:00

tools_context.go

fix(text): truncate on rune boundaries, not byte offsets (#93)

2026-08-18 07:13:15 +02:00

tools_graph.go

feat(mcp): expose brain_graph tool — neighbors, subgraph, path

2026-05-23 15:23:18 +02:00

tools_notes_test.go

fix(mcp): close claim-envelope bypass on value-only brain_edit diffs

2026-09-23 10:21:53 +02:00

tools_notes.go

fix(mcp): close claim-envelope bypass on value-only brain_edit diffs

2026-09-23 10:21:53 +02:00