Dylan M. Taylor a719521c13 security: bound ai-core redaction, template rendering and model checks; consent for params-only requests ...

- redact matches secrets in the original text only, so markers are never searched again
  (CodeRabbit CWE-400, secret.rs:47)
- render_text/render_value share one MAX_RENDERED_BYTES budget across repeated slots
  (CodeRabbit CWE-400, spec/template.rs:122)
- Connection::validate checks model-ID uniqueness with a set instead of a pairwise scan
  (CodeRabbit CWE-407, connection.rs:205)
- Disclosure::kinds counts parameters as text, so a request carrying only params still needs
  an agreement (CodeRabbit CWE-863, consent.rs:123)

2026-10-22 21:37:34 -04:00

..

spec_support

craft-ai-core: rename from craft-ai-model; lapse each kind of consent on its own; keep models found at a new address

2026-10-15 20:06:57 +01:00

contract_regressions.rs

craft-ai-core: record which address a test's models came from

2026-10-16 23:07:53 -06:00

custom_connection.rs

craft-ai-core: rename from craft-ai-model; lapse each kind of consent on its own; keep models found at a new address

2026-10-15 20:06:57 +01:00

custom_tools.rs

craft-ai-core: rename from craft-ai-model; lapse each kind of consent on its own; keep models found at a new address

2026-10-15 20:06:57 +01:00

mock_conformance.rs

craft-ai-core: rename from craft-ai-model; lapse each kind of consent on its own; keep models found at a new address

2026-10-15 20:06:57 +01:00

spec_calls.rs

craft-ai-core: rename from craft-ai-model; lapse each kind of consent on its own; keep models found at a new address

2026-10-15 20:06:57 +01:00

spec_rules.rs

craft-ai-core: rename from craft-ai-model; lapse each kind of consent on its own; keep models found at a new address

2026-10-15 20:06:57 +01:00

spec_template.rs

security: bound ai-core redaction, template rendering and model checks; consent for params-only requests

2026-10-22 21:37:34 -04:00