@aaronjmars e654b9f5ee fix(security): use Path.is_relative_to for WIKI_PATH containment in ingest_file ... Replaces str.startswith() with Path.is_relative_to() to prevent sibling-prefix paths (e.g. /wiki-shared/x.md when WIKI_PATH=/wiki) from bypassing the entry guard. Includes regression test with 3 scenarios proving the bug exists pre-patch and is fixed post-patch. Closes #26 Co-authored-by: aaronjmars <61592645+aaronjmars@users.noreply.github.com>		2026-06-10 07:20:07 -03:00
..
_test_path_containment.py	fix(security): use Path.is_relative_to for WIKI_PATH containment in ingest_file	2026-06-10 07:20:07 -03:00
file_ingestion.py	fix(security): use Path.is_relative_to for WIKI_PATH containment in ingest_file	2026-06-10 07:20:07 -03:00
ingestion.py	Initial commit: Memory OS — 6-layer memory architecture for Hermes Agent	2026-05-31 16:50:37 -03:00
reflection.py	fix(worker): add missing import os, Qdrant auth, and env config (#6)	2026-06-02 13:21:30 -03:00