Repository navigation
fix(egress): never follow redirects into Host (4.3b) - #739
Merged
Merged
Conversation
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Preserve full-origin P2, return and record inward O2 hops, and bind followers only where primary redirect ownership can transfer safely. Add reusable SNS no-follow configuration and Bedrock configuration seam. Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Carry the stricter policy on each request without changing the existing follower or the shared factory pipeline. Qualify redirect guarantees for transports that retain redirect ownership. Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Require consistent completed test results, causal named failures, exact byte restoration and clean green rebuilds. Preserve failure verdicts and export recoverable evidence from disposable containers with a path-safe host decoder. Verified by 39 host-only Python fixtures outside the repository; no dotnet or containers were run for these fixtures. Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Co-authored-by: Codex <noreply@openai.com>
Carry the historical redirect set plus shared-client policy, warning, filter-order and primary-setting cases. Every case names the intended failing assertion; no mutation evidence is claimed before final-tree execution. Co-authored-by: Codex <noreply@openai.com>
Reproduce the adapter RunInfo emitted by the real 4.10b smoke. The positive diagnostic fixture fails with the old parser; unrelated runner errors, mismatched theory cases, aborted outcomes and compiler errors remain rejected. Co-authored-by: Codex <noreply@openai.com>
Accept only a single-line xUnit FAIL RunInfo whose entire theory-case name matches a validated failed UnitTestResult. Other run-level errors remain invalid. All 47 portable fixtures pass; the captured real smoke parses 65 green, 4 of 65 red, and 65 restored green. Co-authored-by: Codex <noreply@openai.com>
The mutant changes FollowAsync, so require the exact asynchronous limit-exceeded case instead of the independent synchronous differential test. Co-authored-by: Codex <noreply@openai.com>
R1 is on master. Update the AwsBedrockChatClientFactory sdk.client pin from 3 to 2 (RuntimeConfig seam collapsed the sites) so F2 passes. Mark owner O2 as implemented in the decisions log. Co-authored-by: IanFrelinger <IanFrelinger@users.noreply.github.com>
3 of 5 tasks
3 tasks done
3 tasks done
Persist the differential fixture certificate through PFX so Schannel can use the private key on Windows (Readiness Windows dry-run). Co-authored-by: IanFrelinger <IanFrelinger@users.noreply.github.com>
Contributor
|
Updated tip |
Contributor
|
Merged squash as |
cursor Bot
pushed a commit
that referenced
this pull request
Oct 9, 2026
Take 4.3b redirect inventory wording and O2 implemented-in (#739); keep D16 decisions-log row; regenerate knowledge graph. Co-authored-by: IanFrelinger <IanFrelinger@users.noreply.github.com>
This was referenced Oct 11, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
SPEC-007 PR 4.3b: owner O2 (never follow a redirect from outside the host boundary into it), P2 by origin, filter/ordering hardening, differential twins, Known limits. Supersedes draft #727 with master R1 merged and the Bedrock
sdk.clientinventory pin fixed (cert-gate F2).Changes
*.localhost/unix/npipe rule; hop recorded, 3xx returned (P1 and P2)Credentialsprimaries leave following off for Ashlar's followerNeverFollowRedirects; BedrockRuntimeConfigseamci/egress-inventory.tsv: Bedrocksdk.clientpin 3→2 (matches collapsed factory)Testing
F2_every_pin_equals_what_the_scan_sees(pinned total 3, observed 2)Testing strategy (blast radius)
Checklist
Records touched
SPEC-007, EgressInventory, CHANGELOG, egress-inventory.tsv, cert-gate-assertions, PublicAPI as in #727
Release
Supersedes #727. Merge after #738.