fix: harden security boundaries without API changes - #934

Merged

rapids-bot[bot] merged 16 commits into

NVIDIA:release/0.8from

willkill07:fix/security-hardening

Aug 28, 2026

Commits on Aug 27, 2026

fix: harden security boundaries without API changes
willkill07
committed
1fc285b
fix: verify coding agent permission flows
willkill07
committed
50a0dcb
fix: enforce coding agent security boundaries
mnajafian-nv
committed
de4daf1
fix: confine observability file writes
mnajafian-nv
committed
703893d
chore: update Rust attributions
mnajafian-nv
committed
57b159f
fix: avoid new filesystem packages
mnajafian-nv
committed
4e42779
fix: harden private observability outputs
willkill07
committed
565a2b6

Commits on Aug 28, 2026

Merge branch 'release/0.8' into fix/security-hardening
willkill07
authored
361c400
fix(cli): authenticate explicit daemon hooks
willkill07
committed
ec674b9
fix(observability): accept Windows output roots
willkill07
committed
9dfc3f5
fix(observability): permit Windows atomic trace writes
willkill07
committed
f74c92f
test(observability): avoid Debug bound in Linux sink test
willkill07
committed
5cc8e73
fix(observability): size Windows rename records correctly
willkill07
committed
611d3ac
fix(observability): terminate Windows rename targets
willkill07
committed
ac35b8f
fix(observability): use absolute Windows rename targets
willkill07
committed
13825f3
test(plugins): use integrity-only worker E2E policy
willkill07
committed
1ed4e65