Archive completed tasks, add cleanup commands, self-documenting dashboard UI
CI / build (push) Has been cancelled
CI / build (push) Has been cancelled
- Archive 79 completed framework-dev tasks from tasks/ -> tasks/complete/ - status.py: add --cleanup-done and --install-cleanup-schedule commands - Add scripts/automaton-cleanup.sh for periodic task archiving - Dashboard: rename 'Background' tab -> 'Agent', 'Cleanup' agent -> 'Completed Task Archiver', remove redundant group headers and pill badges, dim inactive agent placeholders - .rules.md: add Self-Documenting UI Names rule - New tests: test_cleanup_done.py, expanded test_app.py and test_task.py
This commit is contained in:
@@ -1,14 +0,0 @@
|
||||
# Adversarial Bug Report — actionable-phase-guidance
|
||||
|
||||
## Attack Vectors
|
||||
1. **Empty state**: What happens for an unknown/unexpected state value?
|
||||
2. **HTML injection**: Could guidance text contain user-controlled content that escapes sanitization?
|
||||
3. **Empty guidance**: Does the frontend handle missing/incomplete guidance gracefully?
|
||||
|
||||
## Findings
|
||||
- Unknown states fall through to a generic return — safe, no crash
|
||||
- Guidance text is static (no user content), so injection is not a concern
|
||||
- Frontend checks `task.phase_guidance` truthiness before rendering the guidance section — safe
|
||||
|
||||
## Verdict
|
||||
No vulnerabilities found. The implementation is defensive against all checked attack vectors.
|
||||
Reference in New Issue
Block a user