@aaronjmars e654b9f5ee fix(security): use Path.is_relative_to for WIKI_PATH containment in ingest_file ... Replaces str.startswith() with Path.is_relative_to() to prevent sibling-prefix paths (e.g. /wiki-shared/x.md when WIKI_PATH=/wiki) from bypassing the entry guard. Includes regression test with 3 scenarios proving the bug exists pre-patch and is fixed post-patch. Closes #26 Co-authored-by: aaronjmars <61592645+aaronjmars@users.noreply.github.com>		2026-06-10 07:20:07 -03:00
..
services	fix: resolve 5 easy Phase 4 performance/resilience issues	2026-06-03 11:53:18 -03:00
tasks	fix(security): use Path.is_relative_to for WIKI_PATH containment in ingest_file	2026-06-10 07:20:07 -03:00
Dockerfile	fix: align worker UID with host user (1000) for bind mount read access	2026-06-07 13:06:11 -03:00
main.py	fix: resolve 4 code-critical issues from Fase 2 audit	2026-06-03 10:54:53 -03:00
requirements.txt	Initial commit: Memory OS — 6-layer memory architecture for Hermes Agent	2026-05-31 16:50:37 -03:00