mathiasandClaude Sonnet 5 e157311cd8 fix(mcp): validate the claim envelope before brain_edit writes too (#136) ...

7 review rounds closed 8 distinct bypasses across two mechanism families: fence-detection (field-name substring, block-containment, fence-stripping, CRLF, UTF-8 BOM) and value-extraction (folded YAML block scalar hiding an invalid value). A known v1 gap remains in the block-scalar fold's handling of blank-line-interrupted continuations — documented on checkClaimEnvelope, accepted deliberately (narrow, requires an already-privileged caller deliberately constructing a specific malformed-YAML shape) rather than chased past diminishing returns. Real fix (shared, tested, encoding-normalized frontmatter parser) tracked separately as hyperguild#138.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Mathias <mthbqv@gmail.com>

2026-09-23 10:28:07 +00:00

..

brain_update_test.go

feat(mcp): brain_read + brain_edit, contained to the sync source (brain#4) (#96)

2026-08-18 18:14:05 +00:00

handlers_test.go

fix(watcher): never walk into raw/rejected/ — brain_reject (closes #81)

2026-09-23 06:06:35 +00:00

handlers.go

fix(watcher): never walk into raw/rejected/ — brain_reject (closes #81)

2026-09-23 06:06:35 +00:00

integration_test.go

feat(brain): add brain_answer and brain_classify MCP tools

2026-05-12 11:06:17 +02:00

pending_nudge_test.go

feat(brain): surface an aging review queue in brain_context (#82)

2026-08-18 00:37:48 +02:00

pending_nudge.go

feat(brain): surface an aging review queue in brain_context (#82)

2026-08-18 00:37:48 +02:00

server_test.go

fix(watcher): never walk into raw/rejected/ — brain_reject (closes #81)

2026-09-23 06:06:35 +00:00

server.go

fix(watcher): never walk into raw/rejected/ — brain_reject (closes #81)

2026-09-23 06:06:35 +00:00

tools_answer_test.go

fix(brain_answer): reranker is a filter, not a gate — fall back to BM25 when it keeps nothing

2026-06-16 22:53:02 +02:00

tools_answer.go

fix(brain_answer): reranker is a filter, not a gate — fall back to BM25 when it keeps nothing

2026-06-16 22:53:02 +02:00

tools_capture_test.go

chore(lint): adopt the canonical .golangci.yml from infra/ci-templates

2026-09-05 14:42:59 +02:00

tools_capture.go

feat(mcp): brain_read + brain_edit, contained to the sync source (brain#4) (#96)

2026-08-18 18:14:05 +00:00

tools_context_test.go

feat(mcp): wire brain_context tool

2026-05-25 18:53:14 +02:00

tools_context.go

fix(text): truncate on rune boundaries, not byte offsets (#93)

2026-08-18 07:13:15 +02:00

tools_graph.go

feat(mcp): expose brain_graph tool — neighbors, subgraph, path

2026-05-23 15:23:18 +02:00

tools_notes_test.go

fix(mcp): validate the claim envelope before brain_edit writes too (#136)

2026-09-23 10:28:07 +00:00

tools_notes.go

fix(mcp): validate the claim envelope before brain_edit writes too (#136)

2026-09-23 10:28:07 +00:00