luigidemasi opened a new pull request, #165: URL: https://github.com/apache/camel-kit/pull/165
Implements the six security-model verification items from #6, with one commit per issue. The fixes cover source-only parser regressions; graph confinement, input limits and deadlines; explicit Claude MCP grants; init/catalog path confinement; Knowledge argument, transport and offline-model behavior; and the corrected process inventory. This PR targets `docs/5-security-model` so the six commits can be reviewed and applied before #6 is accepted. Maintainer acceptance remains pending, and publication is tracked by #131. - Fixes #153 - Fixes #154 - Fixes #155 - Fixes #156 - Fixes #157 - Fixes #158 Validation: - Full root `./mvnw -B clean install` on Java 21: 1,977 tests, 1,966 passed, 11 existing optional skips, zero failures/errors. - Root sourcecheck and 11 Python tool tests: passed. - Parser and real-model boundary probes on Java 17/21/25; deliberate unsafe mutations rejected. - Actual Claude Code 2.1.316 with generated settings: 12 permission/dispatch cases passed. - Packaged Knowledge stdio/SSE first-query probes: passed in both default stdio and explicitly enabled loopback SSE, with no child executable or application service connection. The checked-in regression tests and reproducible host probes are described in `docs/security-verification.md`. Graph byte/entry limits and cooperative parser cancellation are documented precisely; the model does not claim an OS sandbox. Generated path preflight rejects descendant symbolic links; atomic replacement also preserves outside hard-linked files and existing POSIX modes. New generated files use the helper's private temporary-file permissions on POSIX filesystems. Website impact: required for #154/#155/#157/#158, with Antora updates included. #153 is regression coverage; #156 corrects the source inventory. The existing Quarkus fork-shutdown warnings also occur on the unchanged #6 base. Hosted CI is not triggered for this stacked base because the repository's PR workflow targets `main` only; local verification is reported separately. _AI-generated by OpenAI Codex on behalf of @luigidemasi._ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
