fix: fail closed on malformed sysadmin provider booleans #242
Open
nsaspy
wants to merge 0 commits from
rage/471-sysadmin-provider-booleans into main
pull from: rage/471-sysadmin-provider-booleans
merge into: nsaspy:main
nsaspy:main
nsaspy:feat/p0-prolog-python-nim-product-packages
nsaspy:fix/860-lisp-evidence-type-fence-20260921
nsaspy:feat/strange-loop-experts
nsaspy:companion/805-android-animations-20260917
nsaspy:feat/star-kb-agent
nsaspy:fix/860-lisp-apply-input-schema-20260921
nsaspy:agentic15/lane3-closed-output-contracts
nsaspy:feature/doordash-commerce
nsaspy:feat/860-lisp-symbolic-conversation-20260921
nsaspy:feat/mara-emacs-todo-roam-928
nsaspy:feat/zara-symbolic-memory
nsaspy:fix/860-lisp-apply-verification-lineage
nsaspy:expert-builder-2/nix-bash-current-core-20260920
nsaspy:fix/860-core-lisp-composition
nsaspy:fix/860-lisp-composition-argument-authority
nsaspy:feat/864-nix-bash-style-sources
nsaspy:fix/859-language-handler-verdict
nsaspy:fix/859-language-handler-failed-verdict
nsaspy:fix/859-expert-stop-unregister
nsaspy:feat/863-js-ts-java-kotlin-host
nsaspy:fix/860-lisp-delegation-status
nsaspy:feat/expert-composition-864
nsaspy:feat/862-language-expert-adapters-v2
nsaspy:chore/dotfiles-expert-ownership-20260919
nsaspy:feat/zara-emacs-deep-20260919
nsaspy:feat/862-language-expert-adapters
nsaspy:feature/866-wiki-gates-search
nsaspy:codex/emacs-kb-857-20260919
nsaspy:feat/851-zara-ssh-files
nsaspy:feat/844-zara-music-prolog-tools
nsaspy:feat/emacs-workflows-20260919
nsaspy:feat/org-roam-shared-memory-2026-09-19
nsaspy:feat/844-zara-music
nsaspy:feat/calendar-caldav-824
nsaspy:feature/zara-activity-android-826
nsaspy:feat/zara-home-ha-transport
nsaspy:feat/prolog-policy-plugin-20260917
nsaspy:feat/812-prolog-policy-default-kb
nsaspy:feat/zara-home-ha-events
nsaspy:feat/839-zara-pi-bash-tmux
nsaspy:feat/zara-cota-static-gtfs-830
nsaspy:feature/zara-mobility-829-20260917
nsaspy:docs/agents-working-model-20260917
nsaspy:codex/808-stock-expert-2026-09-17
nsaspy:feat/linux-context-hooks
nsaspy:feat/811-prolog-policy-advice
nsaspy:fix/zara-coding-criteria-provenance-v2
nsaspy:plugin-d/local-recall-transactional-install
nsaspy:plugin-b/pipewire-player-506
nsaspy:plugin-d/508-discord-transactional-install
nsaspy:fix/zara-discord-startup-fail-closed
nsaspy:fix/browser-list-tabs-primary-error
nsaspy:fix/zara-coding-evidence-provenance
nsaspy:feat/zara-browser-webdriver-backend
nsaspy:rage/503-files-root-shape
nsaspy:rage/500-calendar-mutation-proof
nsaspy:rage/495-contacts-create-proof
nsaspy:rage/497-calendar-write-evidence
nsaspy:rage/495-contacts-create-evidence
nsaspy:rage/489-comms-send-evidence-replay
nsaspy:rage/485-calendar-free-busy-evidence
nsaspy:rage/489-comms-send-evidence
nsaspy:rage/485-calendar-free-busy-evidence-replay
nsaspy:rage/489-comms-send-payload-proof
nsaspy:rage/487-calendar-event-temporal-order
nsaspy:rage/483-timers-persisted-numeric-types
nsaspy:rage/481-github-pr-provider-metadata
nsaspy:rage/479-media-numeric-metadata
nsaspy:rage/477-media-accepted-bool
nsaspy:rage/475-comms-attachment-size-type
nsaspy:rage/473-comms-provider-booleans
nsaspy:rage/469-home-scene-verified-bool
nsaspy:rage/467-contacts-accepted-bool
nsaspy:rage/465-calendar-accepted-bool
nsaspy:rage/463-media-provider-booleans
nsaspy:rage/461-discord-boolean-policy
nsaspy:rage/459-expert-host-policy
nsaspy:rage/457-discord-chance-policy
nsaspy:rage/455-timers-numeric-descriptors
nsaspy:rage/453-discord-history-bounds
nsaspy:rage/451-browser-session-bounds
nsaspy:rage/449-avatar-renderer-command-config
nsaspy:rage/447-avatar-directory-policy
nsaspy:rage/407-avatar-renderer-policy-replay
nsaspy:rage/444-discord-context-bound-types
nsaspy:rage/444-discord-context-bound-types-replay
nsaspy:fix/443-avatar-idle-cpu
nsaspy:rage/439-discord-audit-bound-types
nsaspy:rage/439-discord-audit-red-proof
nsaspy:rage/435-healthcheck-numeric-types-replay
nsaspy:rage/435-healthcheck-numeric-types
nsaspy:rage/434-files-numeric-types
nsaspy:rage/432-contacts-numeric-types
nsaspy:rage/429-sysadmin-numeric-types
nsaspy:rage/427-calendar-numeric-types
nsaspy:rage/425-comms-policy-types
nsaspy:rage/423-media-constructor-limit-types
nsaspy:rage/421-media-queue-search-types
nsaspy:rage/419-media-playback-types
nsaspy:rage/417-local-recall-selector-type
nsaspy:rage/415-local-recall-bool-limits
nsaspy:rage/413-context-plugin-ttl-type
nsaspy:rage/411-context-freshness-types
nsaspy:rage/409-knowledge-config-types
nsaspy:rage/407-avatar-renderer-policy
nsaspy:rage/403-agent-zero-config-types-v2
nsaspy:rage/403-agent-zero-config-types
nsaspy:rage/403-agent-zero-config-red
nsaspy:rage/399-starintel-numeric-types-v2
nsaspy:rage/399-starintel-numeric-types
nsaspy:rage/399-starintel-numeric-red
nsaspy:rage/395-emacs-config-types-v2
nsaspy:rage/395-emacs-config-types
nsaspy:rage/395-emacs-config-red
nsaspy:rage/392-brave-config-types-v2
nsaspy:rage/392-brave-config-types
nsaspy:rage/377-coding-prolog-policy-v2
nsaspy:rage/377-red-proof-v2
nsaspy:rage/387-github-integer-limits
nsaspy:rage/385-github-numeric-config
nsaspy:rage/377-coding-prolog-policy-descriptors
nsaspy:rage/382-memory-duplicate-projections
nsaspy:rage/379-shell-runtime-limit-type
nsaspy:rage/374-memory-duplicate-recall
nsaspy:rage/369-coding-inspector-descriptors
nsaspy:rage/368-memory-projection-evidence
nsaspy:rage/370-shell-policy-collections
nsaspy:rage/366-memory-backend-fact-bound
nsaspy:rage/364-shell-policy-descriptors
nsaspy:rage/362-memory-recall-bound
nsaspy:rage/360-expert-bool-bounds
nsaspy:rage/358-github-config-bools
nsaspy:rage/356-github-number-types
nsaspy:rage/354-shell-runtime-bool
nsaspy:rage/352-memory-jsonrpc-id-type
nsaspy:rage/350-memory-mcp-result-status
nsaspy:rage/348-memory-mcp-oserror
nsaspy:rage/345-memory-schema-registration-type-v2
nsaspy:rage/345-memory-schema-registration-type
nsaspy:rage/340-memory-schema-types-v2
nsaspy:rage/340-memory-schema-types
nsaspy:rage/336-coding-task-state-executable-v2
nsaspy:rage/338-memory-bounded-facts
nsaspy:rage/336-coding-task-state-executable
nsaspy:rage/334-memory-type-selector-validation
nsaspy:rage/332-coding-canonical-changed-paths
nsaspy:rage/330-shell-invalid-subprocess-strings
nsaspy:rage/328-memory-provenance-alias
nsaspy:rage/326-memory-write-evidence
nsaspy:rage/324-memory-fact-term
nsaspy:rage/322-memory-scope-type
nsaspy:rage/320-shell-cwd-type
nsaspy:rage/318-memory-provenance
nsaspy:rage/316-memory-query-type
nsaspy:rage/314-shell-argv-container
nsaspy:rage/312-shell-env-mapping
nsaspy:rage/310-current-zara-pin
nsaspy:rage/308-shell-typed-stdin
nsaspy:rage/306-memory-schema-fact-isolation
nsaspy:rage/303-github-strict-result-limits
nsaspy:rage/301-shell-strict-runtime-config
nsaspy:rage/298-shell-environment-allowlist
nsaspy:rage/296-memory-mcp-finite-deadline
nsaspy:rage/294-memory-mcp-response-identity
nsaspy:rage/292-memory-type-isolation
nsaspy:rage/290-shell-byte-limits
nsaspy:rage/288-task-dependencies
nsaspy:rage/286-current-verifier-failures
nsaspy:rage/284-shell-finite-runtime
nsaspy:rage/280-latest-verifier-result
nsaspy:rage/282-shell-typed-config
nsaspy:rage/1-verifier-owned-evidence
nsaspy:rage/registry-timeout-abort
nsaspy:rage/registry-module-import-timeout
nsaspy:rage/registry-bound-module-entrypoints
nsaspy:rage/registry-bound-contract-attributes
nsaspy:rage/registry-service-factory-timeout
nsaspy:rage/registry-legacy-entrypoint-timeout
nsaspy:rage/coding-task-repository-context
nsaspy:rage/registry-sync-timeout-bounds
nsaspy:rage/registry-real-sync-timeouts
nsaspy:rage/coding-task-state-protocol-fence
nsaspy:rage/registry-installed-import-isolation
nsaspy:rage/coding-task-state-response-timeout
nsaspy:rage/coding-task-state-crash-fence
nsaspy:rage/coding-task-state-status-contract
nsaspy:rage/registry-dependency-env-construction
nsaspy:rage/248-document-task-completion
nsaspy:docs/248-task-state-contract
nsaspy:rage/246-freeze-completed-task
nsaspy:rage/244-evidence-status
nsaspy:rage/242-passing-verification
nsaspy:rage/240-task-state-bounds
nsaspy:rage/242-passing-evidence
nsaspy:rage/238-prolog-task-state
nsaspy:rage/236-verifier-duplicate-evidence
nsaspy:rage/234-canonical-verification-object-ids
nsaspy:rage/232-service-plugin-type-agreement
nsaspy:rage/230-deduplicate-worktree-evidence
nsaspy:rage/228-deduplicate-changed-path-evidence
nsaspy:rage/226-isolate-agent-zero-env
nsaspy:rage/224-isolate-avatar-renderer
nsaspy:rage/222-isolate-starintel-live-env
nsaspy:rage/220-strip-live-provider-secrets
nsaspy:rage/215-module-level-factory
nsaspy:rage/217-canonical-evidence-paths
nsaspy:rage/213-commit-tree-object-id
nsaspy:rage/211-diff-head-object-id
nsaspy:rage/209-inspect-head-object-id
nsaspy:rage/207-worktree-head-object-id
nsaspy:rage/205-service-api-version
nsaspy:rage/199-branch-object-id
nsaspy:rage/202-worktree-lock-proof
nsaspy:rage/200-worktree-add-proof
nsaspy:rage/199-branch-object-ids
nsaspy:rage/197-log-object-ids
nsaspy:rage/195-numstat-errors
nsaspy:rage/193-diff-snapshot
nsaspy:rage/191-inspect-dirty-snapshot
nsaspy:rage/189-atomic-branch-create
nsaspy:rage/187-branch-inventory-snapshot
nsaspy:rage/185-fence-branch-create
nsaspy:rage/183-confine-installers
nsaspy:rage/181-confine-plugin-roots
nsaspy:rage/179-strict-service-metadata
nsaspy:rage/177-compat-lifecycle-timeout
nsaspy:rage/175-canonical-install-command
nsaspy:rage/173-python-dependency-metadata
nsaspy:rage/171-canonical-search-paths
nsaspy:rage/169-registry-updated-date
nsaspy:rage/167-canonical-registry-strings
nsaspy:rage/registry-installer-layout-agreement
nsaspy:rage/registry-install-command-grammar
nsaspy:rage/registry-source-urls
nsaspy:rage/registry-search-path-metadata
nsaspy:rage/registry-install-target-metadata
nsaspy:rage/registry-flake-source-metadata
nsaspy:rage/registry-license-metadata
nsaspy:rage/compat-runtime-advice-contract
nsaspy:rage/compat-runtime-worker-sync
nsaspy:rage/compat-runtime-worker-signature
nsaspy:rage/compat-runtime-worker-identity
nsaspy:rage/coding-worktree-remove
nsaspy:rage/compat-runtime-advice-shutdown
nsaspy:rage/compat-runtime-dispatch-contract
nsaspy:rage/registry-nix-metadata-agreement
nsaspy:rage/registry-runtime-readonly-config
nsaspy:rage/registry-require-docs
nsaspy:rage/registry-runtime-closed-workers
nsaspy:rage/registry-confine-metadata-paths
nsaspy:rage/registry-runtime-subscription-lifecycle
nsaspy:rage/registry-runtime-worker-contract
nsaspy:rage/registry-runtime-subscribe-contract
nsaspy:rage/registry-lifecycle-call-semantics
nsaspy:rage/registry-service-tools-call-semantics
nsaspy:rage/registry-async-tools
nsaspy:rage/registry-async-lifecycle
nsaspy:rage/registry-enabled-default-contract
nsaspy:rage/registry-legacy-precedence
nsaspy:rage/registry-legacy-entrypoint-proof
nsaspy:rage/registry-canonical-tool-names
nsaspy:rage/registry-tool-metadata-quality
nsaspy:rage/registry-description-metadata
nsaspy:rage/registry-search-path-discovery
nsaspy:rage/registry-isolate-plugin-imports
nsaspy:rage/registry-tool-name-collisions
nsaspy:rage/1-zara-coding-evidence-branch-shape
nsaspy:rage/1-zara-coding-verify-branch-shape
nsaspy:rage/1-zara-coding-evidence-root-shape
nsaspy:rage/1-zara-coding-verify-root-shape
nsaspy:rage/1-zara-coding-worktree-evidence-path-shape
nsaspy:rage/1-zara-coding-verify-worktree-path-shape
nsaspy:rage/1-zara-coding-verify-path-boundary
nsaspy:rage/1-zara-coding-repository-text-evidence
nsaspy:rage/1-zara-coding-verify-evidence-shape
nsaspy:rage/1-zara-coding-snapshot-evidence-shape
nsaspy:rage/1-zara-coding-worktree-evidence-shape
nsaspy:rage/1-zara-coding-branch-inventory-bound
nsaspy:rage/1-zara-coding-verify-head-shape
nsaspy:rage/1-zara-coding-diff-snapshot
nsaspy:rage/1-zara-coding-rollback-proof
nsaspy:rage/1-zara-coding-inspect-bound
nsaspy:rage/1-zara-coding-dirty-path-coherence
nsaspy:rage/1-zara-coding-doc-current-surface
nsaspy:rage/1-zara-coding-add-lock-rollback
nsaspy:rage/1-zara-coding-changed-path-verify
nsaspy:rage/1-zara-coding-worktree-absent
nsaspy:rage/1-zara-coding-worktree-verify
nsaspy:rage/1-zara-coding-worktree-add-locked
nsaspy:rage/1-zara-coding-worktree-remove
nsaspy:rage/1-zara-coding-branch-assertion
nsaspy:rage/1-zara-coding-check-repository
nsaspy:rage/1-zara-coding-verify-tool
nsaspy:rage/1-zara-coding-spec-verify
nsaspy:rage/1-zara-coding-repository-evidence
nsaspy:rage/1-zara-coding-spec-compile
nsaspy:rage/1-zara-coding-worktree-add
nsaspy:rage/1-zara-coding-branch-create-cas
nsaspy:rage/1-zara-coding-commit
nsaspy:rage/1-zara-coding-branch-delete
nsaspy:rage/1-zara-coding-branch-create
nsaspy:rage/1-zara-coding-worktree-inventory
nsaspy:rage/1-worktree-list
nsaspy:rage/1-repo-list-status
nsaspy:rage/1-spec-language-catalog
nsaspy:rage/1-git-diff-summary
nsaspy:rage/1-git-log-adapter
nsaspy:rage/1-zara-coding-spec-normalize
nsaspy:rage/7-symbolic-memory-native-remember-get
nsaspy:rage/1-zara-coding-task-state
nsaspy:rage/5-zara-shell
nsaspy:rage/8-home-assistant-adapter
nsaspy:rage/7-zara-memory
nsaspy:rage/13-zara-voice-lab
nsaspy:rage/12-zara-voice
nsaspy:rage/8-zara-home-rules
nsaspy:rage/8-zara-home
nsaspy:rage/2-zara-expert
nsaspy:rage/32-discord-scoped-moderation
nsaspy:rage/31-discord-moderation-ack
nsaspy:rage/28-discord-moderation-audit
nsaspy:rage/35-discord-ci-preset
nsaspy:rage/33-discord-channel-commands
nsaspy:rage/33-discord-channel-inspection-policy
nsaspy:rage/27-discord-opt-in-message-content
nsaspy:rage/34-discord-content-diagnostics
nsaspy:rage/30-discord-public-output-privacy
nsaspy:rage/29-discord-user-isolation
nsaspy:rage/12-voice-runtime
nsaspy:rage/53-installed-runtime-smoke
nsaspy:rage/53-lifecycle-compat
nsaspy:rage/12-voice
nsaspy:rage/19-healthcheck-clean
nsaspy:rage/19-healthcheck
nsaspy:rage/16-timers
nsaspy:rage/11-comms
nsaspy:rage/17-contacts
nsaspy:rage/10-calendar
nsaspy:rage/14-media
nsaspy:rage/6-sysadmin
nsaspy:rage/15-files
nsaspy:rage/9-browser
nsaspy:rage/4-context
nsaspy:rage/3-desktop
nsaspy:rage/3-desktop-red
nsaspy:rage/52-emacs-red
nsaspy:rage/18-51-knowledge-brave
nsaspy:rage/50-github-red
nsaspy:fix/agent-zero-native-api
nsaspy:rage/53-zara-compat-red
nsaspy:feat/zara-starintel-server-47
nsaspy:fix/discord-recent-context
nsaspy:feat/agent-zero-bridge-40
nsaspy:fix/discord-tool-execution
nsaspy:feat/zara-persona-37
nsaspy:feat/declarative-runtime-layout
nsaspy:feat/discord-inspection-moderation
nsaspy:fix/discord-manager-permissions
nsaspy:feat/zara-org-todos
nsaspy:codex/zara-plugins-ci-push
nsaspy:feat/zara-discord
No reviewers
Labels
Clear labels
accessibility
Barrier affecting people with disabilities
bug
Something isn't working
documentation
Improvements or additions to documentation
duplicate
This issue or pull request already exists
enhancement
New feature or request
good first issue
Good for newcomers
help wanted
Extra attention is needed
invalid
This doesn't seem right
question
Further information is requested
security
wontfix
This will not be worked on
No labels
accessibility
bug
documentation
duplicate
enhancement
good first issue
help wanted
invalid
question
security
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".
No due date set.
Dependencies
No dependencies set.
Reference
nsaspy/zara-plugins!242
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "rage/471-sysadmin-provider-booleans"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Implements #471.
RAGE transaction: deterministic RED first, then minimal fail-closed provider boolean handling. Mutation acceptance and diagnostic booleans must not use generic truthiness.
Full registry/install/Nix gate required before merge.
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.Merge
Merge the changes and update on Forgejo.Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.