Files

T

CI / build (push) Has been cancelled

Details

Archive completed tasks, add cleanup commands, self-documenting dashboard UI

- Archive 79 completed framework-dev tasks from tasks/ -> tasks/complete/
- status.py: add --cleanup-done and --install-cleanup-schedule commands
- Add scripts/automaton-cleanup.sh for periodic task archiving
- Dashboard: rename 'Background' tab -> 'Agent', 'Cleanup' agent -> 'Completed Task Archiver', remove redundant group headers and pill badges, dim inactive agent placeholders
- .rules.md: add Self-Documenting UI Names rule
- New tests: test_cleanup_done.py, expanded test_app.py and test_task.py

2026-06-24 22:43:33 -04:00

817 B

Raw Blame History

Verdict: fix-can-edit-path-prefix

Status: PASS

Completion Date: 2026-06-22

Summary

The fix correctly prevents sibling-directory bypass at all 5 locations in status.py. All tests pass.

Findings

str(file_path).startswith(proj_str + os.sep) or str(file_path) == proj_str correctly handles path boundaries.
All 5 affected locations use the same consistent pattern.
Bug Finder found no bugs. Adversarial Bug Finder confirmed no issues with symlinks, trailing slashes, or case sensitivity.
No contradictions between the two reports.
Test coverage added: TestCanEditPathPrefix (3 tests covering sibling rejection, subdirectory acceptance, and can-edit-task).
All 242 tests pass.

Tasks for Review / Tie-Breaks

None.

Remaining Issues

None.

Score

+10 (PASS)

817 B Raw Blame History