Skip to content

Security: kumanday/OpenSymphony

Security

docs/security.md

type topic-doc
area security
visibility public
last_memory_sync 2026-06-23 15:32:29 +0000

Security

Current model

  • COE-401 contributed: PR #92: COE-401: Web app entry and deployment modes (merge 73b9067)
  • COE-407 contributed: PR #125: feat(api-client): browser transport streaming, replay, and remote protocols (COE-407) (merge 4d70347)
  • COE-408 contributed: PR #129: Add harness adapter capability discovery (merge 96345e3)
  • COE-419 contributed: PR #126: Load desktop task graph dependencies from Linear (merge 64242a6)
  • COE-423 contributed: PR #130: feat(gateway): add model credential settings seam (merge 07274f4)
  • COE-425 contributed: PR #132: feat(openhands): add subscription credential adapter (merge 93cea67)

Important invariants

  • Preserve the behavior described in the recent captured changes unless current code and tests show it has changed.
  • Use capsule source refs to inspect the original PR or Linear issue when context is ambiguous.

Operational flow

  • No generated diagram requested for this sync.

Known gotchas

  • No area-specific gotchas were inferred from the selected memory.

Recent changes

  • COE-401: Web App Entry And Deployment Modes
  • COE-407: Browser Transport And Remote Stream Protocols
  • COE-408: Harness Adapter And Capability Model
  • COE-419: Hosted Auth Placeholders And Web Parity
  • COE-423: Model And Credential Settings
  • COE-425: OpenHands Subscription Credential Adapter
  • COE-426: Codex App-Server Prototype And Benchmarks
  • COE-428: Model Configuration UI And Routing Metadata
  • COE-429: Codex Approvals And Cross-Harness Routing
  • COE-452: DuckDB Prebuilt Developer Build Mode
  • COE-453: Non-Interactive Init For Automation
  • COE-454: OKF Bundle Schema And Legacy Capsule Mapping
  • COE-456: OKF Writer, Lint, And Migration Fixtures
  • COE-458: Catalog Reindex And Query Compatibility From OKF
  • COE-460: OKF Export, Import, And Visibility Boundaries
  • COE-461: Memory Graph DTOs And Gateway Endpoints
  • COE-463: Docs Sync And MCP Admin Parity For OKF
  • COE-464: Graph Extraction, Metrics, And Community Pipeline
  • COE-465: Shared Graph Frontend Package And Reducers
  • COE-467: Three.js Graph Renderer And Worker Layouts
  • COE-468: Concept Inspector, Search, Filters, And Accessibility Fallback
  • COE-469: Live Memory Graph Integration And Privacy Gates
  • COE-471: Graph Scale, Visual Regression, And Web/Desktop Hardening
  • COE-473: Desktop task graph dependency and run detail parity
  • COE-475: ChatGPT OAuth For Codex Harness
  • COE-476: Codex Production Harness Enablement
  • COE-478: Harden model profile storage and validation follow-ups
  • COE-479: Codex Debug Session Resume
  • COE-480: Run Detail Metrics And Density
  • COE-481: Model Configuration Codex Subscription Follow-Up
  • COE-482: TUI Codex Token Usage Accounting
  • COE-483: Codex Event Content Summaries
  • COE-484: Desktop Live Snapshot And Run Detail Refresh
  • COE-485: Harden desktop live event resumption and refresh failure visibility
  • COE-486: Harness Interrupt Contract And Run Diagnostics
  • COE-487: Desktop Run Detail TUI Parity
  • COE-488: Lazy Desktop Launcher Command
  • COE-489: OpenHands Agent-Server Interrupt Adapter
  • COE-490: Codex App-Server Turn Interrupt Adapter
  • COE-491: Desktop Run Detail Action Wiring And Cleanup
  • COE-492: Merging Supersedes Human Review Polling
  • COE-493: Desktop Operations Integration Hardening
  • COE-494: Project Metadata For Operator Issue Snapshots
  • COE-495: FrankenTUI Project Headers And Dependency Gutter
  • COE-496: Desktop Project Grouping And Collapse
  • COE-497: Project Grouping Integration Hardening
  • COE-498: Tree-sitter Provider Skeleton And Rust Parsing
  • COE-499: Memory Context AST Provider Integration
  • COE-500: Query Packs For Supported Agent Languages
  • COE-501: Code Intelligence Persistence And Ingestion
  • COE-502: Read-Only AST MCP And CLI Tools
  • COE-503: Code Intelligence Performance Docs And Hardening
  • COE-504: Linear Polling And Rate-Limit Recovery
  • COE-505: Add scheduler-side Codex stdio interrupt channel
  • COE-506: Invert CodeIntelIndex trait ownership after AST memory integration
  • COE-507: Deduplicate query-pack assets for grammar variants
  • COE-508: Cache code-intel parsers and compiled query packs
  • COE-520: Route desktop Knowledge Graph through native gateway commands
  • COE-521: Workflow Target Branch Model And Init Customization
  • COE-522: Init Target Branch Prompt And Flag
  • COE-523: Update Workflow Settings Mode
  • COE-524: Template Docs And Settings Hardening
  • COE-525: Desktop Installer Contract And Release Metadata
  • COE-526: Desktop Release Bundle Pipeline
  • COE-527: Source Build Fallback And Prerequisites
  • COE-528: App Download Install And Launch Flow
  • COE-529: Desktop Auto-Update Flow
  • COE-530: Installer Docs And End-To-End Validation
  • COE-531: Workspace Shell Graph Hero And Surface State
  • COE-532: Symbol Identity Container Chain And Code Read Model
  • COE-533: Code Graph DTOs Gateway Routes And Native Commands
  • COE-534: Code Graph Frontend Surface Adapters And Inspector
  • COE-535: Run Diff Symbol Navigation And Code Overlay
  • COE-536: Cross Graph Code Memory And Work Chips
  • COE-537: Code Graph Scale Accessibility And Parity Hardening
  • COE-540: Canonical Codex Thread Reuse And Workspace Retention
  • COE-541: Durable Codex Thread Archive And Debug Recovery
  • COE-542: Target Branch Code Index And Revision Snapshots
  • COE-543: Workspace Code Overlay And Composite Graph
  • COE-544: Indexed Agent Code Context And Retrieval
  • COE-545: Edge Delta And Module Topology Diff
  • COE-546: Code Graph Bootstrap UX And End-To-End Validation
  • COE-547: Central Multi-Repository Config And Safe Migration
  • COE-548: Canonical Repository Binding And Task Propagation
  • COE-549: Verified Checkouts Instructions And Harness Envelopes
  • COE-550: Per-Instance Memory Catalog And Source Migration
  • COE-551: Scoped Cross-Repository Memory And Leaf Overlays
  • COE-553: Parent Execution Roots And Child Workspace Reuse
  • COE-554: Restart-Safe Parent Integration Controller
  • COE-555: Parent Repair Review And Merge Lifecycle
  • COE-556: Bottom-Up Subtree Cleanup And Recovery
  • COE-562: Implement artifact validation and digest primitives
  • COE-563: Implement task-packet admission and freeze tooling
  • COE-564: Implement verifier execution and outcome records
  • COE-565: Implement isolated workspace materialization
  • COE-566: Implement configurable run matrices and scheduling
  • COE-567: Implement run lifecycle and process-protocol primitives
  • COE-608: ACP Profiles And Executable Protocol Client
  • COE-609: ACP Session Ownership And Durable Recovery
  • COE-610: ACP Client Callbacks And Session Configuration
  • COE-611: ACP Execution Routing And Worker Integration
  • COE-612: ACP Operator Requests And Response Routing
  • COE-613: ACP Extensions And Harness Operations
  • COE-615: ACP Runtime Conformance And Live Qualification

Source refs

  • COE-401
  • COE-407
  • COE-408
  • COE-419
  • COE-423
  • COE-425
  • COE-426
  • COE-428
  • COE-429
  • COE-452
  • COE-453
  • COE-454
  • COE-456
  • COE-458
  • COE-460
  • COE-461
  • COE-463
  • COE-464
  • COE-465
  • COE-467
  • COE-468
  • COE-469
  • COE-471
  • COE-473
  • COE-475
  • COE-476
  • COE-478
  • COE-479
  • COE-480
  • COE-481
  • COE-482
  • COE-483
  • COE-484
  • COE-485
  • COE-486
  • COE-487
  • COE-488
  • COE-489
  • COE-490
  • COE-491
  • COE-492
  • COE-493
  • COE-494
  • COE-495
  • COE-496
  • COE-497
  • COE-498
  • COE-499
  • COE-500
  • COE-501
  • COE-502
  • COE-503
  • COE-504
  • COE-505
  • COE-506
  • COE-507
  • COE-508
  • COE-520
  • COE-521
  • COE-522
  • COE-523
  • COE-524
  • COE-525
  • COE-526
  • COE-527
  • COE-528
  • COE-529
  • COE-530
  • COE-531
  • COE-532
  • COE-533
  • COE-534
  • COE-535
  • COE-536
  • COE-537
  • COE-540
  • COE-541
  • COE-542
  • COE-543
  • COE-544
  • COE-545
  • COE-546
  • COE-547
  • COE-548
  • COE-549
  • COE-550
  • COE-551
  • COE-553
  • COE-554
  • COE-555
  • COE-556
  • COE-562
  • COE-563
  • COE-564
  • COE-565
  • COE-566
  • COE-567
  • COE-608
  • COE-609
  • COE-610
  • COE-611
  • COE-612
  • COE-613
  • COE-615

There aren't any published security advisories