improvement(tools): prevent internal request self-hops - #7190

Merged

icecrasher321 merged 17 commits into

codex/internal-operation-guidance

Aug 28, 2026

Commits on Aug 28, 2026

improvement(tools): prevent internal request self-hops
icecrasher321
committed
a5f4b8d
Merge remote-tracking branch 'origin/staging' into codex/internal-operation-guidance
icecrasher321
committed
36bb427
fix(executor): preserve background execution principals
icecrasher321
committed
016683a
fix(executor): authorize files with workflow principals
icecrasher321
committed
cf7ffe1
fix(auth): bound derived workflow delegations
icecrasher321
committed
749e745
Merge remote-tracking branch 'origin/staging' into codex/internal-operation-guidance
icecrasher321
committed
efceaf6
fix(tools): close boundary review gaps
icecrasher321
committed
19d8b02
fix(tools): close indirect boundary gaps
icecrasher321
committed
7e91e00
Merge remote-tracking branch 'origin/staging' into codex/internal-operation-guidance
icecrasher321
committed
b80417c
fix(tools): resolve helper-built self hops
icecrasher321
committed
b9e4bdd
fix(tools): normalize relative self hop paths
icecrasher321
committed
0b9dbcc
fix(tools): fail closed on opaque URL helpers
icecrasher321
committed
c8a463e
fix(tools): reject dynamic Sim-origin paths
icecrasher321
committed
7da1283
fix(tools): enforce external request origin
icecrasher321
committed
674ac98
Merge remote-tracking branch 'origin/staging' into codex/internal-operation-guidance
icecrasher321
committed
105cab9
fix(tools): close remaining self-hop bypasses
icecrasher321
committed
d27ed63
fix(tools): block self-hosted loopback aliases
icecrasher321
committed
f1d95a6