Martin Vogel 8967d7cd41 Remove AV-triggering words from token vocabulary, revert audit allowlist ...

Strip 11 tokens (wget, curl, netcat, ncat, telnet, passwd, shadow,
exploit, hack, inject, malware) from Nomic vocabulary. These fall back
to sparse random vectors — negligible quality impact. Removes all
security audit exceptions: zero allowlists, zero suppressions.

2026-04-06 16:12:02 +02:00

..

ci

Refactor CI: split monolith workflows into reusable components

2026-04-02 16:57:44 +02:00

hooks

Add time-bomb + MCP file read audit, tracked pre-commit hooks

2026-03-21 16:43:48 +01:00

benchmark-index.sh

Fix C++ SEGV: NULL deref in LSP type resolver on large header files

2026-03-26 16:19:10 +01:00

build.sh

Auto-detect WIN32_LIBS in Makefile, remove shell quoting entirely

2026-03-19 00:00:19 +01:00

check-nolint-whitelist.sh

Fix lint: magic numbers in cypher/sqlite_writer/configlink/gitignore, extract URL-in-args helpers

2026-04-02 01:08:51 +02:00

clean.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

clone-bench-repos.sh

Cross-service communication discovery + RAM-first incremental indexing

2026-03-28 13:59:42 +01:00

embed-frontend.sh

Fix Windows build: add zip pkg, portable embed (od replaces xxd)

2026-03-19 10:59:14 +01:00

env.sh

Fix production build errors, add build step to Docker test infra

2026-03-18 17:15:46 +01:00

extract_nomic_vectors.py

Parallelize post-passes, fix mode filtering + semantic edge quality

2026-04-06 12:41:30 +02:00

lint.sh

Split 168 functions to cognitive complexity 25, zero lint errors

2026-03-31 20:04:12 +02:00

security-allowlist.txt

Skip update when already on latest version

2026-04-03 17:41:27 +02:00

security-audit.sh

Pin Actions to SHA + enforce via security audit + Dependabot

2026-03-21 16:57:17 +01:00

security-fuzz-random.sh

Fix 29 CodeQL alerts: command injection, snprintf overflow, TOCTOU races

2026-03-21 22:18:31 +01:00

security-fuzz.sh

Separate perf tests from CI, fix cross-platform build issues

2026-04-02 14:52:14 +02:00

security-install.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

security-network.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

security-strings.sh

Remove AV-triggering words from token vocabulary, revert audit allowlist

2026-04-06 16:12:02 +02:00

security-ui.sh

Robust UI audit: skip inline URL scan on dist/, keep structural checks

2026-03-20 20:56:52 +01:00

security-vendored.sh

Fix cross-platform vector blob assembly and vendored security allowlist

2026-04-06 12:54:13 +02:00

setup-windows.ps1

Remove Go-era cruft, update THIRD_PARTY.md for pure C project

2026-03-22 01:09:12 +01:00

setup.sh

Remove Go-era cruft, update THIRD_PARTY.md for pure C project

2026-03-22 01:09:12 +01:00

smoke-test.sh

Fix smoke test: platform-specific config paths + consolidated skill name

2026-04-06 15:25:09 +02:00

soak-test.sh

Separate perf tests from CI, fix cross-platform build issues

2026-04-02 14:52:14 +02:00

test_mcp_rapid_init.py

fix(mcp): address QA round 1 findings

2026-03-21 12:37:28 -05:00

test.sh

Auto-detect WIN32_LIBS in Makefile, remove shell quoting entirely

2026-03-19 00:00:19 +01:00

vendor-grammar.sh

Add Go LSP hybrid type resolver, config store, and supporting infrastructure

2026-03-12 13:26:13 +01:00

vendored-checksums.txt

Remove AV-triggering words from token vocabulary, revert audit allowlist

2026-04-06 16:12:02 +02:00