Repository navigation

improvement(tools): prevent internal request self-hops - #7190

Merged

icecrasher321 merged 17 commits into

stagingfrom

codex/internal-operation-guidance

Aug 28, 2026

Merged

improvement(tools): prevent internal request self-hops#7190
icecrasher321 merged 17 commits into
stagingfrom
codex/internal-operation-guidance

Commits on Aug 28, 2026
- improvement(tools): prevent internal request self-hops
  Vikhyath Mondreti
  committed
  a5f4b8d
- Merge remote-tracking branch 'origin/staging' into codex/internal-operation-guidance
  Vikhyath Mondreti
  committed
  36bb427
- fix(executor): preserve background execution principals
  Vikhyath Mondreti
  committed
  016683a
- fix(executor): authorize files with workflow principals
  Vikhyath Mondreti
  committed
  cf7ffe1
- fix(auth): bound derived workflow delegations
  Vikhyath Mondreti
  committed
  749e745
- Merge remote-tracking branch 'origin/staging' into codex/internal-operation-guidance
  Vikhyath Mondreti
  committed
  efceaf6
- fix(tools): close boundary review gaps
  Vikhyath Mondreti
  committed
  19d8b02
- fix(tools): close indirect boundary gaps
  Vikhyath Mondreti
  committed
  7e91e00
- Merge remote-tracking branch 'origin/staging' into codex/internal-operation-guidance
  Vikhyath Mondreti
  committed
  b80417c
- fix(tools): resolve helper-built self hops
  Vikhyath Mondreti
  committed
  b9e4bdd
- fix(tools): normalize relative self hop paths
  Vikhyath Mondreti
  committed
  0b9dbcc
- fix(tools): fail closed on opaque URL helpers
  Vikhyath Mondreti
  committed
  c8a463e
- fix(tools): reject dynamic Sim-origin paths
  Vikhyath Mondreti
  committed
  7da1283
- fix(tools): enforce external request origin
  Vikhyath Mondreti
  committed
  674ac98
- Merge remote-tracking branch 'origin/staging' into codex/internal-operation-guidance
  Vikhyath Mondreti
  committed
  105cab9
- fix(tools): close remaining self-hop bypasses
  Vikhyath Mondreti
  committed
  d27ed63
- fix(tools): block self-hosted loopback aliases
  Vikhyath Mondreti
  committed
  f1d95a6

Commits

Commits on Aug 28, 2026