garrytan and capy-ai[bot]
04dcfea0ce
fix(capy): the launch environment is sourced from a 0600 file and no skill fence may print the environment (GSTA-104)
...
During GSTA-96's unattended /ship on #3425 , the Step 14.5 docs-audit child
re-typed the GSTACK_LAUNCH assignments as `export $(...)`; the substitution
came back empty, the bare `export` printed the whole environment, and three
API key values landed in its tool output.
- bin/gstack-capy-install writes the assignments to <verdict>.env (mode 0600,
idempotent PATH prepend) and prints GSTACK_LAUNCH_FILE: <path>.
- ship Step 14.5 prompt, document-release's spawned note, autoplan/DRIVER.md
and gstack-skill-start's capy-asks block say: source the file; never
export $(...), env, printenv or bare set in a tool fence.
- test/launch-env-echo-ratchet.test.ts greps every generated SKILL.md,
sections, DRIVER.md, the Capy skill and bin/ shell helpers, with negative
controls under test/fixtures/launch-env-echo/.
- lib/redact-engine.ts: env.value (HIGH) finds the value of any *_KEY,
*_TOKEN, *_SECRET, *_PASSWORD variable in the writer's environment, so a
leaked value cannot reach a PR body, receipt, report or Drive file.
- scripts/lib/shard-engine.ts scrubs the Capy launch markers from shard
environments (GSTA-99's finding).
Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>
2026-10-26 03:15:05 +00:00
..
2026-10-01 11:57:48 -07:00
2026-10-25 07:03:51 +00:00
2026-10-17 16:47:50 +00:00
2026-10-16 22:00:32 +00:00
2026-10-25 10:50:18 +00:00
2026-10-17 03:32:16 +00:00
2026-10-17 03:32:16 +00:00
2026-10-20 23:55:41 +00:00
2026-10-05 01:29:54 +00:00
2026-10-14 17:36:39 +00:00
2026-10-17 02:40:45 +00:00
2026-10-17 02:40:45 +00:00
2026-10-17 02:40:45 +00:00
2026-10-17 02:40:45 +00:00
2026-10-20 23:55:41 +00:00
2026-10-13 15:17:39 +00:00
2026-09-22 14:57:52 -04:00
2026-10-16 23:09:23 +00:00
2026-10-20 00:24:28 +00:00
2026-10-17 02:40:45 +00:00
2026-10-17 02:40:45 +00:00
2026-10-17 02:40:45 +00:00
2026-10-17 02:40:45 +00:00
2026-10-13 15:17:39 +00:00
2026-10-17 02:40:45 +00:00
2026-10-10 23:26:08 +00:00
2026-10-11 03:10:06 +00:00
2026-10-04 07:58:41 -07:00
2026-10-20 00:24:28 +00:00
2026-10-20 23:55:41 +00:00
2026-10-25 03:56:50 +00:00
2026-10-02 11:11:00 -07:00
2026-09-06 08:54:25 -07:00
2026-10-20 00:24:28 +00:00
2026-09-14 14:32:45 -07:00
2026-10-08 08:00:08 +00:00
2026-10-16 22:00:32 +00:00
2026-10-11 18:16:33 +00:00
2026-10-07 23:29:05 +00:00
2026-06-14 11:40:57 -07:00
2026-08-15 11:42:19 -07:00
2026-10-11 03:10:06 +00:00
2026-10-18 02:51:19 +00:00
2026-09-08 22:40:22 -07:00
2026-10-26 00:29:01 +00:00
2026-09-08 22:40:22 -07:00
2026-10-01 13:55:16 -07:00
2026-10-17 02:40:45 +00:00
2026-09-08 22:40:22 -07:00
2026-09-08 22:40:22 -07:00
2026-10-17 02:10:12 +00:00
2026-10-17 02:10:12 +00:00
2026-10-01 11:57:48 -07:00
2026-09-06 08:54:25 -07:00
2026-10-19 07:26:49 +00:00
2026-10-17 02:40:45 +00:00
2026-10-17 02:40:45 +00:00
2026-10-11 03:10:06 +00:00
2026-10-20 01:06:17 +00:00
2026-09-14 15:14:58 -07:00
2026-08-24 08:55:58 -07:00
2026-10-18 19:26:19 +00:00
2026-10-18 19:26:19 +00:00
2026-10-17 02:40:45 +00:00
2026-10-11 19:09:12 +00:00
2026-10-16 22:00:32 +00:00
2026-10-25 06:51:16 +00:00
2026-10-04 07:58:41 -07:00
2026-10-25 05:06:30 +00:00
2026-10-04 07:58:41 -07:00
2026-08-15 22:20:30 -07:00
2026-10-07 23:29:05 +00:00
2026-06-08 06:20:58 -07:00
2026-10-01 11:57:48 -07:00
2026-10-02 11:11:00 -07:00
2026-10-07 23:29:05 +00:00
2026-10-25 10:50:18 +00:00
2026-10-17 02:40:45 +00:00
2026-06-14 11:40:57 -07:00
2026-10-16 23:09:23 +00:00
2026-08-15 09:37:04 -07:00
2026-10-11 03:10:06 +00:00
2026-10-20 23:55:41 +00:00
2026-10-04 07:58:41 -07:00
2026-10-11 19:09:12 +00:00
2026-10-12 13:17:02 -07:00
2026-10-08 08:00:08 +00:00
2026-10-08 08:00:08 +00:00
2026-10-08 08:00:08 +00:00
2026-10-25 01:25:19 +00:00
2026-10-08 08:00:08 +00:00
2026-10-08 08:00:08 +00:00
2026-10-08 08:00:08 +00:00
2026-10-20 19:02:57 +00:00
2026-10-11 19:09:12 +00:00
2026-10-25 06:38:53 +00:00
2026-10-11 00:32:15 +00:00
2026-10-11 00:32:15 +00:00
2026-10-24 23:55:21 +00:00
2026-10-11 16:48:11 +00:00
2026-10-16 23:09:23 +00:00
2026-10-20 23:55:41 +00:00
2026-10-13 21:31:07 +00:00
2026-10-20 00:24:28 +00:00
2026-10-22 19:57:52 +00:00
2026-10-01 11:57:48 -07:00
2026-10-26 03:15:05 +00:00
2026-10-24 14:04:54 +00:00
2026-10-18 01:54:14 +00:00
2026-10-02 11:11:00 -07:00
2026-10-25 03:56:50 +00:00
2026-10-20 23:55:41 +00:00
2026-10-19 10:29:44 +00:00
2026-10-25 10:50:18 +00:00
2026-10-25 10:37:48 +00:00
2026-10-17 00:41:41 +00:00
2026-10-16 22:00:32 +00:00
2026-10-20 00:24:28 +00:00
2026-10-13 15:38:41 +00:00
2026-10-19 10:29:44 +00:00
2026-10-25 03:56:50 +00:00
2026-10-25 03:56:50 +00:00
2026-10-19 10:29:44 +00:00
2026-10-25 03:56:50 +00:00
2026-10-25 03:56:50 +00:00
2026-10-25 03:56:50 +00:00
2026-10-25 03:56:50 +00:00
2026-10-25 03:56:50 +00:00
2026-10-17 03:32:16 +00:00
2026-10-17 03:32:16 +00:00
2026-10-13 15:17:39 +00:00
2026-10-11 00:32:15 +00:00
2026-10-17 02:40:45 +00:00
2026-06-07 06:51:10 -07:00
2026-10-17 03:32:16 +00:00
2026-10-03 18:49:34 -07:00
2026-08-16 09:53:31 -07:00
2026-10-03 18:49:34 -07:00
2026-10-18 06:03:18 +00:00
2026-10-25 03:56:50 +00:00
2026-10-04 07:58:41 -07:00
2026-08-15 09:37:04 -07:00