Files
awoooi/apps/api
OG T 42bc1df9f9
Some checks failed
CD Pipeline / build-and-deploy (push) Has been cancelled
fix(phase2): 驗證發現兩處安全漏洞並修正
手動驗證執行中發現:
1. reviewer_agent.py: force push regex 只覆蓋「force push」文字順序,
   漏掉 git 實際格式「git push --force」(push 先, --force/-f 後)
   → 修正為雙向 pattern:(?:force.{0,5}push|push.{0,30}(?:--force|-f\b)).{0,30}main

2. coordinator_agent.py: Critic critical challenge 僅施 0.3 penalty,
   當原始信心 > 0.7(如 0.82)時 penalty 後仍 > 0.4 閾值,
   critical challenge 穿透到 auto-execute 路徑(驗證確認:0.82→0.52>0.4)
   → 新增 Critic REJECT 硬閘(等同 Reviewer REJECT 效力),
     在 penalty 邏輯前強制 requires_human_approval=True

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-15 13:48:55 +08:00
..