Handle relative system temporary directories

This commit is contained in:
2026-10-06 01:10:25 +00:00
parent ce3a85e3e6
commit f4d9cf20ec
3 changed files with 61 additions and 1 deletions

View File

@@ -255,7 +255,9 @@ candidate output still leaves the worktree clean.
**Resolution:** Candidate and CLI delivery builds use shared system temporary
storage allocated by `internal/tempdir`, with worktree containment checks and
caller-owned cleanup. Regressions execute both operations with read-only
repository parents and confirm clean worktrees. Affected suites pass.
repository parents and confirm clean worktrees. Additional helper regressions
cover relative system temporary paths and cleanup after rejecting in-worktree
storage. Affected suites pass.
### R7 — Medium: Attachment origin restrictions exceed credential isolation