fix(security): keep implicit quarantine across server restarts and config writes (Spec fix-quarantine-restart) - #1463

Merged

github-actions[bot] merged 5 commits into

mainfrom

fix-quarantine-restart-bypass

Oct 2, 2026

Commits on Oct 2, 2026

fix(runtime): gate the disk entry on server restart so implicit quarantine survives
Dumbris
committed
c703b1f
fix(storage): never lower a recorded quarantine without an explicit decision
Dumbris
committed
a931ce7
fix(httpapi): only an explicit PATCH quarantined value changes quarantine
Dumbris
committed
d0bd601
docs(quarantine): note restarts cleared quarantine in releases affected by #937
Dumbris
committed
73e03bc
test(server): publish a config snapshot instead of mutating the live one in binding guard e2e
Dumbris
committed
0edf3da