base-layer/commandkit
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

Decode native diff paths without revalidation

Browse Source
This commit is contained in:
Eric Rakestraw
2026-11-07 16:00:28 +00:00
parent c4b5bcdbc2
commit e950f61c7f
4 changed files with 23 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
docs/roadmap/implementation.md
View File

@@ -1,6 +1,6 @@
# Audit remediation implementation plan
Status: in progress; Stages 1–20 complete.
Status: in progress; Stages 1–21 complete.
Baseline: `d492c7747175c01a53261206c2b4356e53453621`. Before this sprint,
intervening changes recorded decisions and retired the completed older
@@ -662,6 +662,11 @@ record these outcomes separately.
## Stage 21 — Decode native diff paths without revalidation
**Complete.** Concise diff adaptation decodes tokens from native ConfigKit paths
without revalidating arbitrary strings. Focused diff, pointer and snapshot tests
pass offline in the aligned Go 1.27.0 workspace with `-mod=readonly`, including
root, empty, Unicode and escaped keys.
Findings: F23. Source: ckconfig `diff_report.go` and diff report tests.
1. Change the private token helper to accept configkit.Path. Split its canonical