commit log
- security: complete K3 regression suite 4c32033 Jaime Fournier
- security: gate unsafe deserialization sites d370617 Jaime Fournier
- security: enforce restricted allowlist manifest b70fd0f Jaime Fournier
- security: add worker audit lifecycle records 39692be Jaime Fournier
- security: default scripts to safe prelude 808b174 Jaime Fournier
- security: structure safe sqlite wrapper errors 5d51c1e Jaime Fournier
- security: seed fuzz regression corpus ba8ea87 Jaime Fournier
- security: add K3 regression suite c5f1360 Jaime Fournier
- security: remove duplicate safe prelude import c7c709e Jaime Fournier
- security: authenticate distributed actor frames 635fd70 Jaime Fournier
- security: triage raw datum readers 7379764 Jaime Fournier
- security: add exec worker facade 7f52b20 Jaime Fournier
- security: add source and restrict closure gates df41e65 Jaime Fournier
- updates 14c901d Jaime Fournier
- updates 07cd8c8 Jaime Fournier
- Add Android cross-WPO discovery records 72b3ab4 Jaime Fournier
- release: bump version to 0.2.7 73176e9 Jaime Fournier
- build: convert raw-Chez .sls library source to src/ .ss with generated .sls wrappers 99fec52 Jaime Fournier
- release: bump version to 0.2.6 567a28f Jaime Fournier
- fixes 448ba99 Jaime Fournier
- docs: note ~/.local/bin/jerboa path in AGENTS.md 3c7539e Jaime Fournier
- security: fix all P0-P5 issues from security review 72b4726 Jaime Fournier
- Add vendoring policy to AGENTS.md 8a00e7e Jaime Fournier
- data: add final-wave lessons (version-keyed cache, hash-chain incremental seal, semantics-changing-optimization anti-pattern) 50ca387 Jaime Fournier
- docs: cookbook recipe for getaddrinfo IPv4+IPv6 resolution + SSRF resolve-pin dd183c5 Jaime Fournier
- perf: add O(returned) raft-log-from log accessor to std/raft 60f51d6 Jaime Fournier
- security: serve resolved realpath in httpd static to close check-then-open TOCTOU 4aed067 Jaime Fournier
- security: pin resolved IP in SSRF guard to close DNS-rebinding TOCTOU e939ed1 Jaime Fournier
- data: repair catalog structure + add P2 perf artifacts ec474be Jaime Fournier
- ci: set umask 022 to prevent group-writable cache dirs 3f39ef6 Jaime Fournier
- security: fix re-split crash on empty match at end of subject de55fa7 Jaime Fournier
- ci: add JERBOA_CC_OPT=-O0 (OOM fix) 2f16383 Jaime Fournier
- security: realpath containment for project-file-path symlink escape 8801fa6 Jaime Fournier
- feat(build): add JERBOA_CC_OPT env var to control cc optimization level 399ed5c Jaime Fournier
- ci: add swap, rustup, --disable-x11, JERBOA_NATIVE_FEATURES=tls 2b26efb Jaime Fournier
- security: harden P0 fixes (non-ASCII ReDoS, httpd symlink, SSRF IPv6, taint format) a3c7fa6 Jaime Fournier
- jpkg: move default registry from GitHub Pages to SourceHut 0b50526 Jaime Fournier
- fix(chez): declare S_gc_adaptive_trip_enabled unconditionally 3ac581c Jaime Fournier
- data: add P1 prevention artifacts (foreign-callable guard, content-hash truncation, thread-parameter, code-gen positional, callable-guard recipe) 3bcb0d6 Jaime Fournier
- docs: jpkg-guide — document default @lisp registry and bare-name resolution e583982 Jaime Fournier
- jpkg: show default registry in dir list; sync before search fd77bce Jaime Fournier
- jpkg: built-in default @lisp registry + bare-name resolution 93cb0e9 Jaime Fournier
- jpkg: auto-transpile installed deps; multicall honors JERBOA_PKG_PATH and auto-discovers .jpkg/lib/*/ in CWD f32702f Jaime Fournier
- GC performance: 40-300x p99 pause reduction via rendezvous fix, remote batch, adaptive sweep stack 2326fdc Jaime Fournier
- Accept JERBOA_MCP_NO_SERVE guard in multicall build; add JERBOA_PKG_PATH support b91c5e1 Jaime Fournier
- data: add P0 prevention artifacts (10 scanner patterns, 8 anti-patterns, 5 recipes) a46cf48 Jaime Fournier
- security: fix five P0 audit findings (ReDoS, path traversal, SSRF, taint, MCP framing) aa3efee Jaime Fournier
- install: fall back to GitHub Releases mirror when SourceHut /refs/download/ is blocked a8c73bb Jaime Fournier
- fix: accept PIE binaries in release packaging file check ba589c3 Jaime Fournier
- fix: native linux build falsely detected as Termux 04a15ce Jaime Fournier
previous | next