Capture provider failures in secure debug artifacts
This commit is contained in:
@@ -178,6 +178,12 @@ Preparation captures retain only the provider endpoint origin and reviewed
|
||||
execution settings. URL user information, paths, queries, fragments, and
|
||||
unrecognized provider parameters are omitted.
|
||||
|
||||
Each run directory may contain `preparation.json` (v3), `execution.json` (v3),
|
||||
and, for a provider generation failure, `failure.json` (v1). The failure
|
||||
artifact retains the safe category, HTTP status, and provider code, type, and
|
||||
message for trusted debugging only. Ordinary command output never includes
|
||||
those provider details.
|
||||
|
||||
Capture writes are confined to the requested root and fail if an unsafe
|
||||
filesystem component prevents secure artifact creation.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user