Skip to content

SUPERSEDED — closed — optics monolith split into #145 #147 #146 #148 - #143

Closed
zacharybalicki wants to merge 4 commits into
mainfrom
cursor/optics-audit-p1-security-f25c
Closed

zacharybalicki wants to merge 4 commits into
mainfrom
cursor/optics-audit-p1-security-f25c

Conversation

@zacharybalicki

@zacharybalicki zacharybalicki commented Sep 30, 2026 •

Copy link
Copy Markdown
Member

Superseded by the split pull requests. Do not review or merge this monolith.

Kate's queue stays #140, then #142, then #141. This pull request is not in that queue.

Those drafts stay out of Kate's queue until each is CI green and an independent council records PASS or PASS_WITH_NONBLOCKING_NOTES.

CANDIDATE_ONLY. No publish. No install.vantio.ai go-live. History of this branch was not rewritten.

Refuse a symlinked installer stage, require effective root for live
mutations, pin the observe image to CLI 0.3.24 and wrap node, and read
the gate-mcp API key from the environment. @vantio/gate-mcp 0.1.1 is a
source candidate only.
Record the P1 council as PASS_WITH_NONBLOCKING_NOTES. Fail closed when
VANTIO_INGEST_URL is unusable and a key is set, keep observation fail-open,
honor VANTIO_HOME in CLI readers, and align Python ingest, http.client
status, concurrent shield records, and gate-mcp host/DRY_RUN labels.

CLI 0.3.25 and Python 3.1.1 are source candidates. Not published.
gate_get_policy and gate_residual_risk no longer take api_base.
The key goes to VANTIO_API_BASE, or https://api.vantio.ai when that
variable is unset or blank. Source candidate only. Not published.

P1 and P2-P5 stay on this pull request. Cherry-picking P2-P5 onto
the pre-P1 base conflicts, and this branch is not rewritten.
Independent read of 1c15407 is PASS_WITH_NONBLOCKING_NOTES.
The tool argument cannot choose the host for VANTIO_API_KEY.
This record is not a merge and not a kvantio approval.
@cursor cursor Bot changed the title fix(optics): P1 security audit remediation (candidate, do not merge) fix(optics): P1 security and P2–P5 candidates (do not merge) Sep 30, 2026
@zacharybalicki zacharybalicki changed the title fix(optics): P1 security and P2–P5 candidates (do not merge) SUPERSEDED — do not review — optics monolith (split in progress) Sep 30, 2026
@zacharybalicki
zacharybalicki marked this pull request as draft September 30, 2026 16:25
@zacharybalicki zacharybalicki changed the title SUPERSEDED — do not review — optics monolith (split in progress) SUPERSEDED — closed — optics monolith split into #145 #147 #146 #148 Sep 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant