zara-coding: validate repository inspector policy descriptors eagerly #111

New issue

Closed

opened 2026-09-08 02:03:00 +00:00 by nsaspy · 0 comments

nsaspy commented

2026-09-08 02:03:00 +00:00

Owner

Problem

RepositoryInspector.__init__() checks only that allowed_roots and executable are truthy. Malformed root elements or non-text executables can survive construction and later leak incidental Path/subprocess type errors instead of failing at the coding boundary.

Slice

deterministic RED coverage for malformed allowed roots and Git executable descriptors;
reject invalid descriptors during inspector construction;
keep repository confinement and command surface unchanged;
exact-head compatibility, registry, plugin and Nix gates before merge.

Dependency-ready correctness slice within #1; no cross-plugin composition or Core authorization bypass.

## Problem `RepositoryInspector.__init__()` checks only that `allowed_roots` and `executable` are truthy. Malformed root elements or non-text executables can survive construction and later leak incidental `Path`/subprocess type errors instead of failing at the coding boundary. ## Slice - deterministic RED coverage for malformed allowed roots and Git executable descriptors; - reject invalid descriptors during inspector construction; - keep repository confinement and command surface unchanged; - exact-head compatibility, registry, plugin and Nix gates before merge. Dependency-ready correctness slice within #1; no cross-plugin composition or Core authorization bypass.

nsaspy closed this issue

2026-09-08 02:03:00 +00:00

nsaspy referenced this issue

2026-09-08 02:19:59 +00:00

zara-coding: verify worktree cleanup through SPEC #452