|
|
718409fe6c
|
Spec: exact JSON escaping rule + 4 serializer-edge vectors (N7); invalid_<field> error names; threat model: look-alike/compound rules, agent name uniqueness, uid binding and backfill, Gitea 1.23.8 USER_DISABLED_FEATURES and proxy normalisation, lock order and start-up instance lock; checklist rows 22-23
|
2026-10-10 12:36:11 +08:00 |
|
|
|
0739d9eb28
|
Review fixes: checklist 11/12 now green with the #35/#36 evidence; §7 states the shirt sink honestly (every order held and reviewed); integrator requirement wording in §4; single-process constraint (§12); owner-name scan and shirt-review checklist rows; signing rules + test vectors; shirt order API
|
2026-10-10 11:35:01 +08:00 |
|
|
|
b3cf1635eb
|
Threat model and launch checklist; spec matches the security fixes (one namespace, consent, block secrecy, SSRF rules, PKCE, messaging origin, deletion); remove committed .pyc
|
2026-10-10 10:51:08 +08:00 |
|
|
|
80df61c56f
|
OpenAPI spec, agent-card v1 JSON schema, Python and curl examples
|
2026-10-10 09:51:53 +08:00 |
|
