Oliver Kieselbach 09492e908c fix(security): IME log-pattern pack is anchored and linear (all 90 patterns start with ^, IME-APP-VERSION spells the report-delta JSON out instead of a chained [^}]*? scan) and the ImeLogTracker read loop is bounded — BoundedLineReader (32 MB per line, evidence: real 5.6 MB "Get policies" lines; exact byte bookmarks, no decoder read-ahead loss on cancel), 2 s per-line matching budget across all patterns, held-back unterminated EOF tails (≤1 MB, 1 s settle) instead of dropping them and raw-matching fragments, a complete entry after a dropped one is no longer swallowed as its close, one Warning per pass (oversizedLines/regexTimeouts/lineBudgetBreaks) instead of silent Debug timeouts; unanchored PS-SCRIPT-CONTEXT false positives on [Win32App] SideCarScript… lines (which overwrote the pending platform script's RunContext) are gone; --run-ime-matching assembles multiline entries like the tracker ...

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-30 14:03:50 +02:00

..

Runtime

feat(security): session-owner binding stage 1 (shadow) + dormant agent session rotation

2026-08-29 21:32:24 +02:00

AssemblyInfo.cs

feat(agent-v2): M4.6.α peripheral parity — lifecycle, install, self-update, watchdog

2026-04-21 00:14:48 +02:00

AutopilotMonitor.Agent.V2.csproj

Changed bootstrap script and V2 agent binary name (now without V2, preperation for V1 replacement)

2026-05-07 10:12:37 +02:00

Program.cs

fix(security): startup self-update no longer trusts the on-disk remote-config.json cache — Program.LoadCachedSelfUpdateContext (raw deserialize, bypassed the read-side strip) is removed, the boot-time check runs with allowDowngrade:false and the version-v2.json manifest hash as its only integrity gate; LatestAgentSha256 (update-ZIP hash, ranked above the manifest hash in SelfUpdater) joins the CacheConfig/LoadCachedConfig strip lists so neither the startup nor the FromCache runtime path can take a planted ZIP hash or downgrade flag; verify+extract already share one exclusive handle (1daf631a)

2026-08-30 13:53:00 +02:00

Program.GatherRulesMode.cs

feat: EnableGatherRuleDebugLog — per-tenant gather-rule debug trace (ConfigVersion 36)

2026-07-28 15:59:30 +02:00

Program.Guards.cs

refactor(agent): unified kebab-case log file naming + date-less agent.log

2026-08-18 02:55:06 +02:00

Program.ImeMatchingMode.cs

fix(security): IME log-pattern pack is anchored and linear (all 90 patterns start with ^, IME-APP-VERSION spells the report-delta JSON out instead of a chained [^}]*? scan) and the ImeLogTracker read loop is bounded — BoundedLineReader (32 MB per line, evidence: real 5.6 MB "Get policies" lines; exact byte bookmarks, no decoder read-ahead loss on cancel), 2 s per-line matching budget across all patterns, held-back unterminated EOF tails (≤1 MB, 1 s settle) instead of dropping them and raw-matching fragments, a complete entry after a dropped one is no longer swallowed as its close, one Warning per pass (oversizedLines/regexTimeouts/lineBudgetBreaks) instead of silent Debug timeouts; unanchored PS-SCRIPT-CONTEXT false positives on [Win32App] SideCarScript… lines (which overwrote the pending platform script's RunContext) are gone; --run-ime-matching assembles multiline entries like the tracker

2026-08-30 14:03:50 +02:00

Program.InstallMode.cs

fix(agent): token-aware runtime launch - Scheduled Task first on stripped MSI tokens

2026-08-17 22:39:39 +02:00

TokenPrivilegeProbe.cs

fix(agent): token-aware runtime launch - Scheduled Task first on stripped MSI tokens

2026-08-17 22:39:39 +02:00