Skip to content

Fix canonical form provenance path validation - #1644

Open
chubes4 wants to merge 1 commit into
trunkfrom
fix/1641-form-provenance-terra
Open

Fix canonical form provenance path validation#1644
chubes4 wants to merge 1 commit into
trunkfrom
fix/1641-form-provenance-terra

Conversation

@chubes4

@chubes4 chubes4 commented Sep 10, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Validate form layout and presentation graph provenance with the canonical artifact safe-relative-path validator.
  • Retain fail-closed rejection of non-canonical and traversal paths.
  • Cover canonical normalized stylesheet provenance in artifact compilation.

Verification

  • php tests/contract/run.php
  • composer run test:packaging
  • Private retained artifact staged preparation: 114 pages prepared.

Fixes #1641

AI assistance

OpenAI gpt-5.6-terra via OpenCode implemented, tested, and self-reviewed this change under Astra orchestration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Accept valid provenance in emitted form layout graphs

1 participant