Repository navigation

fix: extend llmspec hardening safeguards - #19

Merged

berketpbs merged 40 commits into

mainfrom

hardening/second-pass-dates

Sep 21, 2026

Merged

fix: extend llmspec hardening safeguards#19
berketpbs merged 40 commits into
mainfrom
hardening/second-pass-dates

Commits on Jul 13, 2026
- fix: reject non-finite size overrides
  berketpbs
  committed
  989be2e
- test: cover non-finite size parsing
  berketpbs
  committed
  110cb79
- docs: document finite size overrides
  berketpbs
  committed
  3f1c9d8
- test: preserve zero-size CPU simulation
  berketpbs
  committed
  0c7e953
Commits on Jul 14, 2026
- fix: reject duplicate HTTP query parameters
  berketpbs
  committed
  96aae0c
- test: cover duplicate query rejection
  berketpbs
  committed
  c57cbba
- docs: document duplicate query handling
  berketpbs
  committed
  fc35b36
- docs: record HTTP parser invariants
  berketpbs
  committed
  e200f94
Commits on Jul 15, 2026
- fix: reject duplicate GGUF metadata keys
  berketpbs
  committed
  5cfc1b3
- test: cover duplicate GGUF metadata
  berketpbs
  committed
  6f269a7
- docs: document duplicate metadata rejection
  berketpbs
  committed
  a389dd2
- docs: record verifier metadata invariants
  berketpbs
  committed
  c1d1c13
Commits on Jul 17, 2026
- fix: reject unterminated oversized HTTP headers
  berketpbs
  committed
  4ae85fa
- refactor: isolate HTTP line-size validation
  berketpbs
  committed
  e982320
- test: cover unterminated HTTP line limits
  berketpbs
  committed
  25ef589
- docs: record HTTP line termination limits
  berketpbs
  committed
  bebb7f2
Commits on Jul 18, 2026
- fix: reject invalid provider elapsed times
  berketpbs
  committed
  fe3807c
- test: cover invalid provider timing
  berketpbs
  committed
  278a1b6
- docs: document provider timing validation
  berketpbs
  committed
  1c4f665
- docs: record runtime measurement invariants
  berketpbs
  committed
  24fcb42
Commits on Jul 20, 2026
- fix: sanitize persisted speed factors
  berketpbs
  committed
  fb6187f
- test: cover unsafe persisted settings
  berketpbs
  committed
  8288ade
- docs: document persisted setting sanitization
  berketpbs
  committed
  4cbecbc
- docs: record configuration trust boundaries
  berketpbs
  committed
  06ba129
Commits on Jul 22, 2026
- ci: enable colored diagnostics and backtraces
  berketpbs
  committed
  a62809c
- ci: align validation with the supported Rust toolchain
  berketpbs
  committed
  eca2d22
- docs: document the CI Rust toolchain
  berketpbs
  committed
  c46518c
- docs: record compiler reproducibility policy
  berketpbs
  committed
  77a6ddb
Commits on Jul 23, 2026
- ci: align release builds with Rust 1.85
  berketpbs
  committed
  c564e94
- ci: bound release job runtimes
  berketpbs
  committed
  6668a12
- docs: document release execution bounds
  berketpbs
  committed
  c566f35
- docs: record release automation boundaries
  berketpbs
  committed
  628e1bf
Commits on Jul 24, 2026
- fix: reject non-finite catalog parameter counts
  berketpbs
  committed
  2bbf814
- test: add catalog invariant regression tests
  berketpbs
  committed
  9354a87
- ci: run catalog invariant regression tests
  berketpbs
  committed
  239ad92
- docs: document catalog regression coverage
  berketpbs
  committed
  d1c5a8d
Commits on Jul 26, 2026
- ci: disable credential persistence in checks
  berketpbs
  committed
  4e61b09
- ci: disable release checkout credentials
  berketpbs
  committed
  fa3449f
- docs: document workflow credential isolation
  berketpbs
  committed
  68fa041
- docs: record workflow credential boundaries
  berketpbs
  committed
  90bb8ce

Commits

Commits on Jul 13, 2026

Commits on Jul 14, 2026

Commits on Jul 15, 2026

Commits on Jul 17, 2026

Commits on Jul 18, 2026

Commits on Jul 20, 2026

Commits on Jul 22, 2026

Commits on Jul 23, 2026

Commits on Jul 24, 2026

Commits on Jul 26, 2026