mathias

mathias opened issue mathias/hyperguild#188

2026-10-05 19:06:00 +00:00

brain_write follows a symlinked wing directory, including one that points outside the brain

mathias commented on pull request mathias/hyperguild#187

2026-10-05 19:04:51 +00:00

fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173)

pr-gatekeeper: BLOCKED (head 87dace3)

mathias pushed to fix/tunnel-detect-174 at mathias/hyperguild

2026-10-05 19:03:32 +00:00

1c9c218dbf test(tunnel): pin the raced read, the walk error and the _index.md skip (#174)

mathias commented on pull request mathias/hyperguild#186

2026-10-05 19:01:28 +00:00

fix(tunnel): DetectTunnels walks and reads through brainfs (#174, #157 slice 5b)

Gatekeeper review: BLOCKED (head da020d1)

The fix holds up when run. The tests don't prove it. I tried to break the production code and couldn't (see "what survived" below). This is…

mathias commented on issue mathias/hyperguild#157

2026-10-05 18:58:23 +00:00

SECURITY: symlinks anywhere in the Syncthing-shared brain dir are followed by search, vectorstore, context and graph readers

Slices 5a and 6 merged and live (PR #175 → ef39435; PR #176 → eedb110).

Check after #176:

The pod restarted cleanly. classification.yaml loaded through brainfs, since startup didn't…

mathias created pull request mathias/hyperguild#187

2026-10-05 18:54:42 +00:00

fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173)

mathias pushed to main at mathias/hyperguild

2026-10-05 18:54:42 +00:00

eedb110be5 fix(pipeline,classification): read the brain through brainfs (#157, slice 6) (#176)

mathias merged pull request mathias/hyperguild#176

2026-10-05 18:54:42 +00:00

fix(pipeline,classification): read the brain through brainfs (#157, slice 6)

mathias created branch fix/write-dir-redirect-173 in mathias/hyperguild

2026-10-05 18:54:01 +00:00

mathias pushed to fix/write-dir-redirect-173 at mathias/hyperguild

2026-10-05 18:54:01 +00:00

87dace37b1 fix(brainfs): refuse a file behind a symlinked directory for reads and writes (#173)

mathias commented on pull request mathias/hyperguild#176

2026-10-05 18:52:20 +00:00

fix(pipeline,classification): read the brain through brainfs (#157, slice 6)

Gatekeeper round 3 on PR #176 (slice 6, head b8ea201): PASS. Not merged, verdict only. The PR is risk/high, so the merge is Mathias's call.

mathias created pull request mathias/hyperguild#186

2026-10-05 18:51:40 +00:00

fix(tunnel): DetectTunnels walks and reads through brainfs (#174, #157 slice 5b)

mathias created branch fix/tunnel-detect-174 in mathias/hyperguild

2026-10-05 18:51:32 +00:00

mathias pushed to fix/tunnel-detect-174 at mathias/hyperguild

2026-10-05 18:51:32 +00:00

da020d1e6c fix(tunnel): DetectTunnels walks and reads through brainfs (#174, #157 slice 5b)

mathias commented on issue mathias/hyperguild#169

2026-10-05 18:51:03 +00:00

brain_tunnel: path traversal lets an MCP token holder rewrite any file the pod can write

Closed by #170 (febab3e), verified live, 2026-10-05. The pod runs the merge image; the graph backfill indexed 1593 notes with no errors.

Live brain_tunnel with a .. target is refused:…

mathias pushed to fix/pipeline-root-157 at mathias/hyperguild

2026-10-05 18:48:25 +00:00

b8ea201bd3 test(pipeline): the page-swap test's positive control asserts the source ref (#157)

b71fc2e19a test(pipeline): pin BackfillRefs' page read with a swap race (#157)

aee5f66398 fix(pipeline,classification): read the brain through brainfs (#157, slice 6)

febab3e45d fix: brain_tunnel, brain_update and session_log confine caller-supplied paths (#169) (#170)

bdc1e51a1a fix(ingestion): build /mcp's bearer and the metrics wrap inside buildMux (#154) (#183)

Compare 9 commits »

mathias pushed to main at mathias/hyperguild

2026-10-05 18:47:08 +00:00

febab3e45d fix: brain_tunnel, brain_update and session_log confine caller-supplied paths (#169) (#170)

mathias closed issue mathias/hyperguild#169

2026-10-05 18:47:07 +00:00

brain_tunnel: path traversal lets an MCP token holder rewrite any file the pod can write

mathias merged pull request mathias/hyperguild#170

2026-10-05 18:47:07 +00:00

fix: brain_tunnel, brain_update and session_log confine caller-supplied paths (#169)

mathias pushed tag v0.24.0 to mathias/hyperguild

2026-10-05 17:52:07 +00:00