Stabilize GitHub peer authorization reads #2

Open

hermes-os wants to merge 2 commits from fix/stable-agent-authorization-read into main

hermes-os commented

2026-08-02 01:34:48 +00:00

(Migrated from github.com)

Summary\n- bind the canonical GitHub peer authorization file to one no-follow, nonblocking descriptor\n- reject inode or metadata replacement across the full read and cap input at 256 KiB\n- cover root-pinned identity, atomic replacement, FIFO replacement, and oversized inputs\n\n## Verification\n- 24 focused handoff tests passed\n- ./validate.sh passed\n- agent-repo-check --strict passed\n- exact-candidate independent review passed with no findings

## Summary\n- bind the canonical GitHub peer authorization file to one no-follow, nonblocking descriptor\n- reject inode or metadata replacement across the full read and cap input at 256 KiB\n- cover root-pinned identity, atomic replacement, FIFO replacement, and oversized inputs\n\n## Verification\n- 24 focused handoff tests passed\n- ./validate.sh passed\n- agent-repo-check --strict passed\n- exact-candidate independent review passed with no findings

👍 1

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin fix/stable-agent-authorization-read:fix/stable-agent-authorization-read

git switch fix/stable-agent-authorization-read

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main

git merge --no-ff fix/stable-agent-authorization-read

git switch fix/stable-agent-authorization-read

git rebase main

git switch main

git merge --ff-only fix/stable-agent-authorization-read

git switch fix/stable-agent-authorization-read

git rebase main

git switch main

git merge --no-ff fix/stable-agent-authorization-read

git switch main

git merge --squash fix/stable-agent-authorization-read