fix(security): validate and pin transcript request destinations - #125

Merged

DoRmAmMu1997 merged 9 commits into

mainfrom

codex/scanner-security-egress

Sep 24, 2026

Commits on Sep 9, 2026

fix(security): validate and pin transcript request destinations

DoRmAmMu1997
and
codex
committed
6d653d8

Commits on Sep 13, 2026

fix: contain transcript PDF parsers within bounded child processes

DoRmAmMu1997
and
codex
committed
e818985
Integrate transcript destination controls with parser containment

DoRmAmMu1997
and
codex
committed
429ca50
docs: explain PDF worker contracts and regression invariants

DoRmAmMu1997
and
codex
committed
d56d3e5

Commits on Sep 14, 2026

docs: document IPO worker containment setup failures

DoRmAmMu1997
and
codex
committed
616c549

Commits on Sep 24, 2026

fix(security): fail over across validated addresses and bound transcript downloads

DoRmAmMu1997
and
claude
committed
58fcdef
Merge PR #125 review fixes into transcript containment

DoRmAmMu1997
and
claude
committed
317dbc3
fix(security): make transcript worker failures visible and drop child secrets

DoRmAmMu1997
and
claude
committed
4d41854
Merge pull request #127 from DoRmAmMu1997/codex/scanner-pdf-containment
DoRmAmMu1997
authored
457a0ec