Rongsong Shen 4e5547ee55 feat(scheduler-core): implement recording directory provisioning and path validation (task 9.1) ... Adds --record-dir CLI flag and sched_validate_record_filename() with canonical-path containment (realpath()-based, not textual-prefix) plus separator/".." rejection before any filesystem access. Adversarial review found and this task fixed two CWE-59 inode-aliasing bypasses: a direct hard link inside record_dir aliasing an outside file, and a compound variant where a symlink pointed at an in-directory file itself hard-linked outside record_dir. Both closed via st_nlink checks on the direct entry and the fully-resolved symlink target respectively, each verified with a live RED->GREEN reproduction. TOCTOU residual risk documented and deferred to task 9.2 (O_NOFOLLOW + fstat() re-check). 18/18 recording subtests, 24/24 scheduler suite, clang-format clean.		2026-08-05 05:39:22 +00:00
..
settings	finalize configuration replication	2026-06-09 16:40:13 +08:00
specs	feat(scheduler-core): implement recording directory provisioning and path validation (task 9.1)	2026-08-05 05:39:22 +00:00
steering	fix(xcecli): restore dangling CA-cert cleanup misses, enable https support	2026-07-23 07:28:01 +00:00