Audit remediation: security, observability, resilience (Phases 1-3)#499

Merged

ndycode merged 33 commits into

mainfrom

audit/phase-1-correctness-security

Jun 2, 2026

Commits on May 31, 2026

fix(security,correctness): Phase 1 audit remediation

ndycode
and
claude
committed
test(sandbox): redirect HOME/CODEX_HOME to a per-run temp dir (tests-ci-01)

ndycode
and
claude
committed
fix(observability,resilience): Phase 2 audit remediation

ndycode
and
claude
committed
fix(prompts): harden GitHub prompt fetch path (Phase 2c)

ndycode
and
claude
committed
feat(ui): honor NO_COLOR / FORCE_COLOR / TTY for color output (ui-04)

ndycode
and
claude
committed
fix(runtime): wire the routing mutex into the proxy (accounts-01/08)

ndycode
and
claude
committed
docs: fix version/override drift + guard it (docs-supplychain-03/04)

ndycode
and
claude
committed
feat(recovery): quarantine + surface corrupt session files (recovery-10)

ndycode
and
claude
committed
fix(config): retry transient FS locks on the config load path (config-04)

ndycode
and
claude
committed
refactor(storage): unify fs-retry code sets (storage-07)

ndycode
and
claude
committed
fix(prompts): SHA-256 cache integrity + atomic cache writes (prompts-03/06)

ndycode
and
claude
committed

Commits on Jun 1, 2026

Commits on Jun 2, 2026