fix(reviewer): close forbidden-git detection gaps via allowlist (closes #243) #247

Merged

sysadmin merged 1 commits from feat/issue-243-forbidden-git-gaps into master

2026-07-06 11:18:32 -05:00

Author	SHA1	Message	Date
sysadminandClaude Opus 4.8	ec8f6abf5b	fix(reviewer): close forbidden-git detection gaps via allowlist (#243 ) Replace blocklist-based git mutation detection with fail-closed allowlist semantics: any git command not matching the readonly set is forbidden. Catches checkout HEAD --, checkout ., git switch variants, and uncommon stash subcommands that bypassed the old regex. Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>	2026-07-06 11:42:14 -04:00

Author

SHA1

Message

Date

sysadminandClaude Opus 4.8

ec8f6abf5b

fix(reviewer): close forbidden-git detection gaps via allowlist (#243 )

Replace blocklist-based git mutation detection with fail-closed allowlist
semantics: any git command not matching the readonly set is forbidden.
Catches checkout HEAD --, checkout ., git switch variants, and uncommon
stash subcommands that bypassed the old regex.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-07-06 11:42:14 -04:00