AkitaOnRailsandClaude Opus 5.5 8addf87969 fix(admin): refuse a rejected message send with 403, add boundary row 8e ...

An admission refusal is a policy decision, as on the MCP path
(invalid_request), not a server fault, so the admin send route now answers 403
instead of 500, and the reject test asserts that status. Records the
MCP/admin admission parity as security-boundaries row 8e; the reject test
fails when the send authorizes against an op the webhook does not subscribe
to.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MDbhmszrjG9s5MrPrTuNtm

2026-10-01 02:40:19 -03:00

..

benchmarks

docs(benchmarks): note cross-run variance; confirm no 2.4 regression via re-run

2026-09-21 14:57:43 -03:00

examples

Merge main into release/2.5

2026-09-28 21:18:08 -03:00

admission-webhooks.md

feat(cli): repair-backfill-timestamps restores original start/end of backfilled sessions

2026-09-25 20:51:40 -03:00

agent-messaging.md

fix(cli): apply message send admission and post-commit observers

2026-09-18 11:17:18 +08:00

airgapped-install.md

docs(backup): recipe + worked example for remote git backup

2026-09-28 02:19:43 -03:00

architecture-overview.svg

fix: scope and harden entity retrieval

2026-07-30 18:06:26 -03:00

ARCHITECTURE.md

Merge PR #996: per-repository server profiles (fixes #992)

2026-09-30 15:55:27 -03:00

auto-improve-eval-gates.md

docs(auto-improve): add eval gate examples

2026-06-22 17:01:57 -03:00

auto-improvement-loop.md

feat(web): add a root-only /web/pending triage page (#855)

2026-09-25 18:11:02 +02:00

auto-scope.md

feat(opencode2): bind the plugin to the 2.0.10+ event api with turn checkpoints

2026-09-23 19:52:22 -03:00

backup.md

docs(backup): fix status --json flag and widen secret excludes

2026-09-28 15:09:20 -03:00

companion-crates.md

Merge remote-tracking branch 'upstream/release/2.5' into feat/external-lifecycle-companion

2026-09-22 21:51:34 -03:00

comparison.md

docs: add Engram, Caura, TencentDB Agent Memory, memU, EverOS to comparison docs (#810)

2026-09-22 17:49:07 -03:00

competitive-parity.md

fix(run): wire hooks and MCP where the launch environment points

2026-09-24 19:03:13 -03:00

cookbook.md

fix(run): ai-jail re-exec/offer, --true-yolo semantics, and relaunch after an interrupted run

2026-10-01 01:53:49 -03:00

deploy.md

docs(https-via-proxy): recipe for TLS-inspecting firewalls / MITM roots (#954)

2026-09-29 12:15:43 -03:00

design-boot-backfill.md

Merge remote-tracking branch 'origin/main' into fix/backfill-dry-run-state

2026-09-19 20:34:06 -03:00

design-decisions.md

fix(hooks): fail closed on unreadable shell calls and cap whole argv words

2026-09-28 21:52:59 -03:00

design-hindsight-borrowings.md

docs: reflect the P1-P5 Hindsight features (design status, ARCHITECTURE)

2026-09-11 20:19:50 -03:00

design-memory-aging.md

docs(design): add migration & upgrade-safety section to memory-aging design

2026-09-20 01:46:50 -03:00

design-page-ingestion-windows.md

fix(store): chunk the V62 page-window backfill off the migration path (#776)

2026-09-19 12:34:13 -03:00

design-per-project-authz.md

docs(authz): record the resolved always-on identity-routing decision (#708)

2026-09-28 20:38:01 -03:00

design-rules-promotion.md

fix(install-hooks)+docs: preserve capture-assistant on re-apply; 2.3 release-audit doc fixes

2026-09-16 12:28:07 -03:00

design-windows-ci.md

docs(windows-ci): record the CoW-off re-measure (Phase 1)

2026-09-22 14:25:27 -03:00

design-yolo-safety-ai-jail.md

fix(run): ai-jail re-exec/offer, --true-yolo semantics, and relaunch after an interrupted run

2026-10-01 01:53:49 -03:00

experience.md

docs: the why/when pass - adoption guidance over feature lists (item 8)

2026-09-01 20:10:53 -03:00

external-lifecycle.md

feat(relay): queue external lifecycle events across restarts

2026-09-21 02:21:59 -03:00

frontend-api.md

feat(web): add a root-only /web/pending triage page (#855)

2026-09-25 18:11:02 +02:00

https-via-proxy.md

docs(https-via-proxy): recipe for TLS-inspecting firewalls / MITM roots (#954)

2026-09-29 12:15:43 -03:00

install.md

docs: document per-repository server profiles (#992)

2026-09-30 18:19:10 +00:00

issues-agentmemory.md

docs: humanize README and docs

2026-05-24 11:30:32 -03:00

issues-basic-memory.md

docs: humanize README and docs

2026-05-24 11:30:32 -03:00

issues-cognee.md

docs: humanize README and docs

2026-05-24 11:30:32 -03:00

issues-mempalace.md

feat: add graph retrieval and memory maintenance

2026-05-25 12:01:41 -03:00

jev-reranker-adapter.md

docs(reranker): ask the choice adapter for the specific answering page

2026-09-28 10:29:25 +08:00

lifecycle-ops.md

Merge PR #921: repair-backfill-timestamps restores original session start/end

2026-09-29 12:37:40 -03:00

llm-provider-comparison.md

fix(llm): constrain compat structured output by default (#292)

2026-07-29 21:09:21 -03:00

llm-provider-fallback.md

fix(config): defer missing llm_fallbacks credentials to serve (#762)

2026-09-18 17:02:43 -03:00

llm-providers.md

Merge main into release/2.5 (forward-merge: #997 docs + Kimi {} fix)

2026-09-30 14:52:03 -03:00

local-embeddings.md

feat(embeddings): hybrid retrieval on by default, best-effort

2026-09-01 19:19:42 -03:00

logo-dark.png

install-mcp: fix Codex schema — bearer_token, not [mcp_servers.X.headers]

2026-05-22 23:53:29 -03:00

logo-light.png

fix(web): replace bloated logo PNG and serve favicon

2026-06-05 13:30:53 -03:00

logo.png

fix(web): replace bloated logo PNG and serve favicon

2026-06-05 13:30:53 -03:00

macos.md

Merge upstream/main into issue/801-native-cli-upgrade

2026-09-23 19:47:04 +03:00

managed-harness-contributions.md

Merge main into release/2.1: pick up the 2.0.4 fix batch

2026-09-05 12:55:11 -03:00

managed-workstreams.md

fix(run): ai-jail re-exec/offer, --true-yolo semantics, and relaunch after an interrupted run

2026-10-01 01:53:49 -03:00

marker-file.md

docs: document per-repository server profiles (#992)

2026-09-30 18:19:10 +00:00

mcp-install.md

feat: install Hermes Agent lifecycle hooks

2026-09-27 12:57:03 -03:00

MIGRATION-2.0.md

fix(migration): take the safety archive before the DB schema migration (#633)

2026-09-04 16:15:03 -03:00

okf.md

Merge main into release/2.5 (forward-merge: #982 #979 #981 #977-stress + docs #954)

2026-09-29 12:30:56 -03:00

prior-art-implementation-findings.md

fix(hooks): preserve handoffs across empty sessions (#386)

2026-08-12 00:57:00 -03:00

research-2026-landscape.md

docs: add Engram, Caura, TencentDB Agent Memory, memU, EverOS to comparison docs (#810)

2026-09-22 17:49:07 -03:00

research-agentmemory.md

docs(research): September 2026 landscape refresh

2026-09-01 01:51:18 -03:00

research-basic-memory.md

docs(research): September 2026 landscape refresh

2026-09-01 01:51:18 -03:00

research-codebase-memory-mcp.md

docs: fill 2.5.0 config reference gaps + fix stale Hermes/tool-count

2026-09-30 15:44:55 -03:00

research-cognee.md

docs(research): September 2026 landscape refresh

2026-09-01 01:51:18 -03:00

research-ecc.md

docs(research): add ECC competitive analysis

2026-09-03 15:01:33 -03:00

research-hindsight.md

docs(research): add Hindsight (vectorize) competitor analysis

2026-09-11 15:16:59 -03:00

research-karpathy-llm-wiki.md

docs: retire the "Codex has no session-end" claim (follows #605)

2026-09-03 15:19:46 -03:00

ROADMAP-2.0.md

docs(roadmap): pr-post-audit over the full 2.0 range joins the cut gate

2026-09-01 19:21:20 -03:00

security-boundaries.md

fix(admin): refuse a rejected message send with 403, add boundary row 8e

2026-10-01 02:40:19 -03:00

security.md

docs: document per-repository server profiles (#992)

2026-09-30 18:19:10 +00:00

shell-completions.md

feat(admin): add password sessions and separated API credentials (#533)

2026-08-31 23:26:41 -03:00

sso.md

docs: add EU/enterprise-readiness reference docs (data handling, SSO, air-gapped install)

2026-09-16 17:02:48 +02:00

support-matrix.md

fix(run): ai-jail re-exec/offer, --true-yolo semantics, and relaunch after an interrupted run

2026-10-01 01:53:49 -03:00

temporal.md

fix(temporal): preserve retirement history in V62 backfill

2026-09-08 20:17:52 -03:00

typed-edges.md

refactor: move the extraction fix out (split into a patch PR)

2026-09-25 14:25:58 -03:00

usage.md

feat(mcp): add status discriminant to memory_handoff_accept (fixes #988)

2026-09-29 17:17:53 -03:00

use-cases.md

docs: Grok handoff is PostToolUse additionalContext

2026-09-21 16:57:51 -03:00

users.md

fix(security): derive capture-exclusion path flavor from the host (GHSA-vh98)

2026-09-30 21:47:41 -03:00

vector-backend-policy.md

fix: scope and harden entity retrieval

2026-07-30 18:06:26 -03:00

web-project-view.png

README: illustrate /web with two screenshots

2026-05-23 13:13:27 -03:00

web-projects-home.png

README: illustrate /web with two screenshots

2026-05-23 13:13:27 -03:00

wiki-migrations.md

docs: humanize README and docs

2026-05-24 11:30:32 -03:00

windows.md

Merge branch 'main' into release/2.5

2026-09-24 22:45:26 -03:00