feat: harden #274 branches-only guard for gitea_create_issue (Closes #274) #449

Merged
sysadmin merged 1 commits from feat/issue-274-branches-only-guard-hardening into master 2026-07-07 16:48:01 -05:00
1 Commits
Author SHA1 Message Date
sysadmin a9265efa82 feat: harden #274 branches-only guard for gitea_create_issue
Follow-up on the branches-only worktree guard (#274):

- verify_preflight_purity: validate resolved worktree exists, is a directory,
  and belongs to the target repository before author mutations.
- gitea_create_issue: add worktree_path for explicit branches/ workspace proof.
- tests/test_create_issue_workspace_guard.py: six regression cases including
  stable-control-checkout rejection with explicit PROJECT_ROOT simulation.

Closes #274
2026-07-07 14:38:10 -04:00