All pull requests

Pull requests

• fix(interp): end the run when a builtin returns after its deadline passed

  #711·astuyve opened Oct 31, 2026Collaborator·

  ·
  1

• fix(interp): release builtins blocked on an idle stdin pipe at the run deadline

  #710·astuyve opened Oct 31, 2026Collaborator·

  ·

• fix(interp): refuse help <cmd> in Check for RemediationOnly builtins

  #709·astuyve opened Oct 31, 2026Collaborator·

  ·

• fix(interp): report write errors on builtin stdout instead of exiting 0

  #708·astuyve opened Oct 31, 2026Collaborator·

  ·

• fix(ls): report readlink failures in long format and exit 1

  #707·astuyve opened Oct 31, 2026Collaborator·

  ·

• feat(help): distinguish configured elevation policy from executable capabilities

  #689·julesmcrt opened Oct 23, 2026Collaborator·2 tasks done·

  ·

• fix: Non-whitespace IFS splitting drops empty fields

  Bits AI
  #671·matt-dz opened Oct 19, 2026Collaborator·2 tasks done·

  ·
  5

• fix: Non-whitespace IFS delimiters lose empty fields

  Bits AI
  #668·matt-dz opened Oct 9, 2026Collaborator·1 of 2 tasks·

  ·
  1

• feat: add local correctness scanner

  #629·matt-dz opened Oct 5, 2026Collaborator·2 tasks·

  ·

• feat(systemctl): add set-property and daemon-reload

  #622·julesmcrt opened Sep 21, 2026Collaborator·

  ·

• feat(interp): elevate output redirects for sudo-marked commands in remediation mode

  #621·julesmcrt opened Sep 21, 2026Collaborator·

  ·
  79

• feat(windows): add get-winevent builtin

  #617·clarkb7 opened Sep 16, 2026Contributor·

  ·

• [DO NOT MERGE - DEMO ONLY] feat(usermod): add narrow usermod -aG builtin for docker-group remediation

  #616·julesmcrt opened Sep 15, 2026Collaborator·

  ·

• feat(rg): implement rg builtin (ripgrep-compatible recursive search)

  #614·julesmcrt opened Sep 10, 2026Collaborator·

  ·
  363

• [DO NOT MERGE - DEMO ONLY] feat: add setfacl builtin (group-entry ACLs, -m/-R/-d)

  #610·julesmcrt opened Sep 9, 2026Collaborator·4 of 6 tasks·

  ·

• Add bazel declarations

  verified/analysis
  #608·aiuto opened Sep 3, 2026·1 of 2 tasks·

  ·
  2

• fix(allowedpaths): resolve ".." against the walked path, not lexically, after a symlink

  #564·julesmcrt opened Jul 22, 2026Collaborator·3 of 4 tasks·

  ·
  1

  8

• Reject --flag=value on no-argument boolean flags

  #540·julesmcrt opened Jun 23, 2026Collaborator·

  ·

• feat(builtins): logrotate demo builtin (host-remediation series)

  #247·julesmcrt opened May 13, 2026Collaborator·5 of 6 tasks·

  ·
  7

• feat(interp): host-binary exec via host:<name>=<path> [DEMO ONLY]

  #228·julesmcrt opened May 5, 2026Collaborator·3 of 4 tasks·

  ·
  24

• feat(builtins): add truncate builtin for sandbox-mediated file truncation

  #219·julesmcrt opened May 4, 2026Collaborator·3 tasks·

  ·
  22

• feat(interp): route file-target output redirects through AllowedPaths

  #209·julesmcrt opened Apr 30, 2026Collaborator·5 tasks done·

  ·
  18

• feat(allowedpaths): permit writes through sandbox open

  #206·julesmcrt opened Apr 30, 2026Collaborator·5 tasks done·

  ·
  2