fix(cachekitio): reject reserved cache-key segments in request path (CWE-22, LAB-2877) - #118

Merged

27Bslash6 merged 6 commits into

mainfrom

agent/irving/4c7e577abd62

Sep 16, 2026

Commits on Sep 4, 2026

fix(cachekitio): reject dot-segment cache keys to prevent path traversal (CWE-22, LAB-2877)
27Bslash6
committed
04dde78
test(cachekitio): remove redundant summary assertion (expert-panel cut)
27Bslash6
committed
367be29

Commits on Sep 6, 2026

fix(cachekitio): reject all five reserved key segments, surface ConfigurationError unwrapped (LAB-2877)
Winston
committed
0984c33
fix(cachekitio): pre-flight reserved keys before the reliability executor (expert panel, LAB-2877)
Winston
committed
48b9279

Commits on Sep 7, 2026

fix(cachekitio): reject empty cache key before URL construction (CWE-22, LAB-2877)
Mark S
committed
e3fb6a6
test(cachekitio): name empty-key check a precondition guard, not a spec rule-2 vector
Mark S
committed
3b768ac