COMMITS
September 14, 2026
R
A `/` write root (Linux) or read root (macOS) no longer switches off the denies beneath it (#533)
ronleizrowice-ant committed
September 10, 2026
D
Merge pull request #528 from anthropics/release/v0.0.76
Danny Cochran committed
S
Release v0.0.76
Shawn M Moore committed
S
Merge pull request #522 from anthropics/dcochran/resolved-ip-guard
shawnm-anthropic committed
D
refactor(network): order the refusal reason deterministically; small cleanups
Danny Cochran committed
D
fix(network): normalize a zoned IPv6 domain entry, and deny two more IPv6 metadata endpoints
Danny Cochran committed
D
fix(proxy): pin the TLS-terminate upstream cert check to the tunnel target
Danny Cochran committed
D
fix(network): decode only the well-known NAT64 prefix, never the local-use /48
Danny Cochran committed
September 9, 2026
D
fix(network): a carried IPv4 form only adds denials, never earns an allow-list carve-out
Danny Cochran committed
D
fix(network): decode the local-use NAT64 prefix only in its /96 layout; doc precision
Danny Cochran committed
D
fix(proxy): spell an IPv4-mapped IPv6 destination as its IPv4 address before any list check
Danny Cochran committed
D
chore(proxy): dialDirect takes its lookup argument explicitly
Danny Cochran committed
D
fix(network): a resolved-address refusal names the class of address, not the address
Danny Cochran committed
D
fix(network): deny the cloud metadata / platform endpoints that live outside link-local
Danny Cochran committed
D
fix(network): a deny-listed IP literal is refused by name too, ahead of any allow-list carve-out
Danny Cochran committed
D
fix(network): judge NAT64 / 6to4 / IPv4-compatible answers by the IPv4 address they carry
Danny Cochran committed
D
D
chore(proxy): one upstream-failure handler per request leg; refresh a test comment
Danny Cochran committed
D
refactor(proxy): one helper owns how a direct request leg addresses its upstream
Danny Cochran committed
D
test(credentials): use `.localhost` names for the second loopback host
Danny Cochran committed
D
fix(proxy): dial the vetted address ourselves instead of handing `lookup` to the HTTP client
Danny Cochran committed
September 8, 2026
D
D
refactor(network): canonicalise injected interface addresses in one place
Danny Cochran committed
D
fix(proxy): give the plain-HTTP direct leg no shared connection pool
Danny Cochran committed
September 7, 2026
D
feat(network): refuse allow-listed hostnames that resolve to denied addresses
Danny Cochran committed
September 3, 2026
R
Sanitize an unregistered attribution key in every violation producer (#513)
ronleizrowice-ant committed
R
linux: skip write-deny binds already covered by a read-only denied directory (#502)
ronleizrowice-ant committed
R
linux: drop a root caller's capabilities in both sandbox modes (#505)
ronleizrowice-ant committed
R
cli: let srt exit after the command when --control-fd is a pipe (#501)
ronleizrowice-ant committed