Sam Valladares 5f6ba0e7d1 fix(audit): panic/DoS/correctness bugs on core (swarm, trivial tier) ... The main-compatible subset of the trivial-tier audit fixes (the backfill.rs + trace_recorder.rs fixes are deferred — those files arrive with the backfill feature PR). All verified against real code: - compression: saturating_sub on bytes_saved (short inputs compress larger) - dreams stage1_replay: select most-recent-N then order, not first-N-then-sort - prediction_error: count total_evaluations in direct evaluate_with_intent branches (rates could exceed 1.0) - reconsolidation: document the (already-correct) idempotency via remove() - speculative file_memory_map: dedup + cap (was unbounded growth) - relationships: reject duplicate ids (silent overwrite corrupted the index) - github: validate owner/repo charset (raw URL-path interpolation) - redmine list_live_ids: u64 offset + wrap/page-cap guards - consolidation/phases: char-boundary-safe truncation (UTF-8 slice panic) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-28 14:50:38 -05:00
..
vestige-core	fix(audit): panic/DoS/correctness bugs on core (swarm, trivial tier)	2026-06-28 14:50:38 -05:00
vestige-mcp	chore(release): v2.1.27 — External-Source Connectors	2026-06-19 11:10:54 -05:00