teahubxyzandclaude 17e51a6b08 security: harden Time for a public repo (#45) ...

- beats_of/verdict/retry: trust only github-actions[bot] and owner/member/collaborator authors (forged state and stranger retries on a public repo)
- touches_protected: paginate pull files and include previous_filename
- browser_check: drop .git after clone, serve only the venture folder, Chrome with no network but localhost
- Hands.run: execute in a docker container when a daemon exists (TIME_RUN_IMAGE), host shell fallback
- tests: logins on fake comments, stranger retry/forged beat cases, paginated files fake


Claude-Session: https://claude.ai/code/session_01CYHXFvWMCs1GUmRmpySqQ6

Co-authored-by: claude <noreply@anthropic.com>

2026-10-13 21:24:42 -07:00

..

ci.yml

venture backends: accounts with passkeys

2026-10-12 18:46:56 +00:00

doctor.yml

venture backends on Cloudflare: a domain, a Worker, a database and AI per venture

2026-10-12 10:50:13 -07:00

heartbeat.yml

security: harden Time for a public repo (#45)

2026-10-13 21:24:42 -07:00

labs-aicharts.yml

labs/aicharts: fix model spelling drift, show the model's answer on failure (#37)

2026-10-13 13:47:49 +00:00

mention.yml

…

update.yml

venture backends: accounts with passkeys

2026-10-12 18:46:56 +00:00

venture.yml

security: harden Time for a public repo (#45)

2026-10-13 21:24:42 -07:00