ZakiandClaude Opus 4.6 f6fdc16d23 fix(security): block cross-channel approval thread hijacking (#1485) ...

Add source_channel field to Thread struct and verify channel
authorization before allowing approval messages to target threads.
The web gateway channel is allowed as a trusted approval UI, and
threads without a source_channel (e.g. deserialized from older DB
records) are permitted for backward compatibility.

Closes #1485

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

2026-03-23 00:28:14 -07:00

..

plans

fix(security): block cross-channel approval thread hijacking (#1485)

2026-03-23 00:28:14 -07:00

BUILDING_CHANNELS.md

DM pairing + Telegram channel improvements (#17)

2026-02-12 00:46:47 +00:00

LLM_PROVIDERS.md

feat(gemini_oauth): full Gemini CLI OAuth integration with Cloud Code API (#1356)

2026-03-21 22:41:44 -07:00

smart-routing-spec.md

feat: integrate 13-dimension complexity scorer into smart routing (#529)

2026-03-05 09:14:07 +00:00

TELEGRAM_SETUP.md

DM pairing + Telegram channel improvements (#17)

2026-02-12 00:46:47 +00:00