Дмитрий
b510a75826
spec(router-gate): v2 closes 10 holes from adversarial audit
Adversarial review of v1 found 10 bypass paths:
- Fatal: AskUserQuestion = universal unlock (1 question = full bypass)
- Critical: Bash unlimited / Skill-invoke-no-followthrough / State-files edit
- Serious: Subagent inheritance / Direct-invocation regex too wide
- Edge cases: leading questions / multi-direct / failure mode / chain TTL
V2 closes all 10:
- 3.1 Protected paths (hard-deny for runtime/settings/skill/hook files)
- 3.2 Subagent gate inheritance via subagent-prompt-prefix injection
- 3.3 Failure modes — explicit fail-CLOSE policy
- 3 chain-state TTL 24h + explicit-clear markers
- 4 Direct invocation = strict whitelist (slash-cmd / Skill() / used N / делай exact)
- 4 Multiple direct invocations require AskUser between executions
- 4.5 AskUserQuestion answer parsing — gate reads transcript response,
unlocks only for explicitly-approved action, blocks on stop answer
- 4.6 Post-skill partial unlock (Read/Grep/next-chain-step allowed,
Edit/Write require additional AskUser, Bash requires whitelist+approval)
- 4.7 Question quality detector in rationalization-audit (blocks
missing-stop-option, flags leading options, off-topic questions)
- 5.1 Bash content rules: whitelist read-only / hard-blacklist mutating /
conditional-whitelist after AskUser approval / path-deny overlay
Implementation cost: 6-8.5h (v1) to 8.5-12h (v2). +2.5-3.5h for
Bash content parser, answer parser, question-quality detector,
hard-deny logic.
Spec v1 (commit 7a43c175) remains in git as baseline.
cspell-words.txt += детектирован / fgrep / chgrp.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-29 05:24:40 +03:00
..
2026-05-09 17:01:36 +03:00
2026-05-09 18:36:36 +03:00
2026-05-09 18:51:55 +03:00
2026-05-11 00:39:36 +03:00
2026-05-16 12:59:42 +03:00
2026-05-10 23:31:44 +03:00
2026-05-10 21:39:23 +03:00
2026-05-10 04:12:58 +03:00
2026-05-10 23:33:22 +03:00
2026-05-10 09:13:45 +03:00
2026-05-10 11:39:29 +03:00
2026-05-11 00:29:12 +03:00
2026-05-11 07:56:22 +03:00
2026-05-11 18:40:41 +03:00
2026-05-11 19:05:31 +03:00
2026-05-12 11:22:30 +03:00
2026-05-12 10:33:53 +03:00
2026-05-12 14:23:37 +03:00
2026-05-13 02:20:09 +03:00
2026-05-12 18:14:58 +03:00
2026-05-12 07:17:19 +03:00
2026-05-13 16:43:13 +03:00
2026-05-13 07:35:30 +03:00
2026-05-13 04:36:51 +03:00
2026-05-13 07:24:00 +03:00
2026-05-14 10:29:40 +03:00
2026-05-14 08:55:32 +03:00
2026-05-14 17:40:43 +03:00
2026-05-14 19:31:23 +03:00
2026-05-14 17:22:58 +03:00
2026-05-14 13:33:27 +03:00
2026-05-15 13:25:37 +03:00
2026-05-15 17:35:59 +03:00
2026-05-15 07:04:57 +03:00
2026-05-16 10:16:03 +03:00
2026-05-15 09:50:53 +03:00
2026-05-15 14:00:47 +03:00
2026-05-15 17:00:05 +03:00
2026-05-16 07:32:35 +03:00
2026-05-16 10:14:29 +03:00
2026-05-16 07:25:10 +03:00
2026-05-16 07:51:57 +03:00
2026-05-16 11:41:08 +03:00
2026-05-17 15:32:03 +03:00
2026-05-17 07:29:42 +03:00
2026-05-18 04:44:15 +03:00
2026-05-18 03:42:39 +03:00
2026-05-25 14:23:11 +03:00
2026-05-18 05:28:58 +03:00
2026-05-18 09:40:10 +03:00
2026-05-18 16:47:58 +03:00
2026-05-19 16:23:43 +03:00
2026-05-19 11:08:55 +03:00
2026-05-23 13:43:28 +03:00
2026-05-19 10:20:01 +03:00
2026-05-21 04:21:26 +03:00
2026-05-20 04:50:18 +03:00
2026-05-20 09:11:07 +03:00
2026-05-21 04:42:41 +03:00
2026-05-20 10:08:31 +03:00
2026-05-21 14:32:49 +03:00
2026-05-21 06:27:59 +03:00
2026-05-25 14:23:11 +03:00
2026-05-25 14:23:11 +03:00
2026-05-25 14:23:11 +03:00
2026-05-23 11:34:51 +03:00
2026-05-25 14:23:11 +03:00
2026-05-23 15:50:37 +03:00
2026-05-23 13:49:42 +03:00
2026-05-25 14:23:11 +03:00
2026-05-26 20:38:50 +03:00
2026-05-24 15:11:43 +03:00
2026-05-24 14:47:43 +03:00
2026-05-25 07:31:33 +03:00
2026-05-24 15:13:18 +03:00
2026-05-25 18:10:31 +03:00
2026-05-25 16:25:22 +03:00
2026-05-26 11:25:29 +03:00
2026-05-26 11:25:29 +03:00
2026-05-26 19:21:33 +03:00
2026-05-29 05:24:40 +03:00