Skip to content

PINW-44: harden Wiki agent security boundaries - #724

Open
simonislee wants to merge 5 commits into
nashsu:mainfrom
simonislee:agent/mika/c7ea2f9bbebb
Open

simonislee wants to merge 5 commits into
nashsu:mainfrom
simonislee:agent/mika/c7ea2f9bbebb

Conversation

@simonislee

Copy link
Copy Markdown

Summary

  • label retrieved wiki/source/web evidence as untrusted and escape delimiter injection
  • add a regression test for hostile retrieved snippets
  • document the Agent action/confirmation policy, filesystem defenses, credential boundary, and loopback/LAN deployment guidance

Verification

  • git diff --check
  • npm run typecheck
  • Rust tests not run locally because cargo is unavailable in this runtime

Closes PINW-44

simonislee and others added 5 commits September 4, 2026 11:35
Co-authored-by: multica-agent <github@multica.ai>
PINW-42: establish reproducible build and release baseline
* [verified] feat: add safe Obsidian vault compatibility

Co-authored-by: multica-agent <github@multica.ai>

* fix(ci): align Rust toolchain with locked dependencies

Co-authored-by: multica-agent <github@multica.ai>

* fix: harden conflict recovery and history writes

Co-authored-by: multica-agent <github@multica.ai>

* fix: preserve history across Windows path forms

Co-authored-by: multica-agent <github@multica.ai>

---------

Co-authored-by: multica-agent <github@multica.ai>
Co-authored-by: multica-agent <github@multica.ai>
Co-authored-by: multica-agent <github@multica.ai>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant