Harden Coreutils Bump to 0.1.1
Release rolling / release (push) Successful in 9m45s

This commit is contained in:
Raven Scott
2026-08-12 21:47:16 -04:00
parent 7171618c74
commit 21325e18d3
432 changed files with 84694 additions and 854 deletions
+2
View File
@@ -2,6 +2,8 @@
## Unreleased
- **Coreutils hardening**: shared runtime helpers (strict ints, path identity, portable Base64/hex, env lookup). Closed data-loss paths (`mv`/`cp` self, `touch` on directories, `truncate` unread files, `rm -i` silently deleting, `install` onto a directory). Missing-file exits now fail (`head`/`tail`/`wc`/`ls`/`du`/`cmp`/`diff`). Bare-only decode no longer requires Node `Buffer`. `seq`/`dd`/`cut`/`nl` are bounded. `find -depth` no longer eats the next argument. `grep -m 0`, `expr` zero-result status, `hostname` set, `sleep` operands, `chmod` symbolic modes, `chown` owner-only, and dashed `unlink -- -name` operands are POSIX-shaped.
- **Agent skills**: new `kernel-program-extension` skill (governed Batch C / kernel program work, roadmap-first workflow, verification_hints integration). Seeded via `BARE_AGENT_SKILL_SEED_REL`.
- **Time command**: comment hygiene (removed "placeholder" phrasing to keep audit baseline clean).
- **`baretop` / `btop**`: `**BARE_TOP_FETCH_EWMA=1`** lowers parallel **`/proc`** batch concurrency when the previous fetch-time EWMA is high; **`BARE_TOP_SCROLL_REGION=1`** sets an experimental DECSTBM region around the process list (reset each frame). Sample fixture **`baretop-sample-metrics.json`** includes **`netSummaryNestedExample`** for nested net UI tests.