Garry TanandClaude Fable 5 85954e604a fix(lib): narrow the override injection denylist to instruction-shaped phrases ...

The /override[:\s]/i pattern flagged any prose containing "override " or
"override:" — CLI flags (--port-override -1), tfvars notes, and plain
"you can override the default region" all tripped the injection guard.
Require an instruction-shaped continuation: "override (all)? previous |
prior | above | the rules/instructions/system prompt". Genuine attempts
like "Override: ignore all previous instructions" still block via the
ignore-previous pattern.

Closes #2401, #1934.

Contributed by @Masashi-Ono0611 (PR #2424); same fix independently by
@JonasFocus (PR #1940).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-14 20:20:57 -07:00

..

diagram-render

v1.58.0.0 feat: diagram + multi-format document engine (mermaid, excalidraw, single-file HTML, DOCX) (#1990)

2026-06-12 15:38:53 -07:00

bin-context.ts

v1.57.5.0 feat: cross-session decision memory + gbrain dream-stage call graph (#1910)

2026-06-08 06:20:58 -07:00

conductor-env-shim.ts

v1.58.1.0 feat: hermetic local E2E + Conductor prose AskUserQuestion (#2004)

2026-06-14 11:40:57 -07:00

context-bill.ts

v1.63.0.0 feat: GStack 2 fork port wave — egress receipts, context-bill, sharded gate, /health fix (#2541)

2026-08-14 09:28:56 -07:00

egress-receipt.ts

v1.63.0.0 feat: GStack 2 fork port wave — egress receipts, context-bill, sharded gate, /health fix (#2541)

2026-08-14 09:28:56 -07:00

gbrain-exec.ts

v1.58.4.0 fix: high-priority community bug wave + PTY plan-mode smoke gate (#2077)

2026-06-21 07:15:19 -07:00

gbrain-guards.ts

v1.57.5.0 feat: cross-session decision memory + gbrain dream-stage call graph (#1910)

2026-06-08 06:20:58 -07:00

gbrain-local-status.ts

v1.61.0.0 fix wave: guards failing open / silent failures (9 fixes, 4 community PRs absorbed) (#2472)

2026-08-08 09:28:45 -07:00

gbrain-sources.ts

v1.61.0.0 fix wave: guards failing open / silent failures (9 fixes, 4 community PRs absorbed) (#2472)

2026-08-08 09:28:45 -07:00

gstack-decision-semantic.ts

v1.57.5.0 feat: cross-session decision memory + gbrain dream-stage call graph (#1910)

2026-06-08 06:20:58 -07:00

gstack-decision.ts

v1.57.5.0 feat: cross-session decision memory + gbrain dream-stage call graph (#1910)

2026-06-08 06:20:58 -07:00

gstack-memory-helpers.ts

fix(gbrain): canonicalize remotes with trailing slashes

2026-07-14 12:56:09 -07:00

is-conductor.ts

v1.58.1.0 feat: hermetic local E2E + Conductor prose AskUserQuestion (#2004)

2026-06-14 11:40:57 -07:00

jsonl-store.ts

fix(lib): narrow the override injection denylist to instruction-shaped phrases

2026-08-14 20:20:57 -07:00

redact-audit-log.ts

v1.53.0.0 feat: smarter redaction — PII/secrets/legal guard across /spec, /ship, /cso, /document-* (#1797)

2026-05-30 08:54:46 -07:00

redact-engine.ts

v1.58.4.0 fix: high-priority community bug wave + PTY plan-mode smoke gate (#2077)

2026-06-21 07:15:19 -07:00

redact-patterns.ts

feat(redact): block Google OAuth client secrets and Telegram bot tokens at HIGH

2026-08-14 20:20:49 -07:00

staging-guard.ts

v1.56.1.0 fix(sync): staging-dir ownership guard + resume-correctness fixes (#1802) (#1856)

2026-06-07 06:51:10 -07:00

worktree.ts

feat: content security — 4-layer prompt injection defense for pair-agent (#815)

2026-04-06 14:41:06 -07:00