uwarp-space 2026-03-04
Pre-release security hardening sprint (rounds 1–5): secret cache TTL, sysop error sanitization, end-state auth cutover, attack lock resolver guard, and icy truecolor WARP login banner
202 files · 10,804+ · 1,872-

Security Hardening (Rounds 1–5)

harden behavioral
3 files changed
  • service.py 13 pre-release hardening issues addressed in round 1; 12 in round 2; round 3 and round 5 hardening applied
  • __init__.py Sysop error responses sanitized; unexpected exceptions logged in is_valid_sysop_jwt
  • config.py Security-related ServerConfig fields hardened
  • Round 1: 13 pre-release hardening issues addressed harden internal
    1 file
    • service.py
  • Round 2: 12 pre-release hardening issues addressed harden internal
    1 file
    • service.py
  • Round 3 and 5 hardening applied; unexpected exceptions in is_valid_sysop_jwt now logged harden behavioral
    1 file
    • __init__.py
  • 8 pre-release hardening issues addressed in round 5 harden internal
    1 file
    • service.py

Auth Infrastructure

harden architectural
2 files changed
  • __init__.py Secret cache TTL added; sysop error responses sanitized; regression tests added; end-state sysop auth cutover finalized
  • models.py Sysop auth cache secret resolution implemented
  • Secret cache TTL added to prevent stale credential use; sysop error responses sanitized to not leak internal details harden architectural
    1 file
    • __init__.py
  • End-state sysop auth cutover finalized; cache secret resolution implemented harden architectural
    1 file
    • models.py

UI

instantiate behavioral
1 file changed
  • banner.py Icy truecolor WARP engine login banner variants added
  • Icy truecolor WARP engine login banner variants added to the terminal login screen instantiate behavioral
    1 file
    • banner.py

Combat and Trading

remediate internal
2 files changed
  • combat.py Attack lock resolver guarded against null state; haggle clamp regression fixed
  • trading.py Reprice clamp now computed from active commodity quantity
  • Attack lock resolver guarded against missing lock state; haggle clamp regression test added remediate internal
    1 file
    • combat.py
  • Reprice clamp now computed from active commodity quantity rather than total inventory remediate internal
    1 file
    • trading.py

Tests

qualify internal
2 files changed
  • test_runtime_parity.py Plugin-engine parity guardrail and mechanics coverage added
  • test_plugin_parity.py Plugin-engine parity enforced for specs and prompts
  • Plugin-engine parity guardrail tests added — catches mismatches between plugin specs and engine behavior qualify internal
    1 file
    • test_runtime_parity.py
  • Plugin-engine parity enforcement for specs and prompts qualify internal
    1 file
    • test_plugin_parity.py

Cleanup

baseline internal
1 file changed
  • pyproject.toml undef-terminal package linkage removed from workspace
  • undef-terminal package linkage removed from workspace; pending workspace changes committed baseline internal
    1 file
    • pyproject.toml
← 2026-03-03 uwarp-space changelog → 2026-03-05 uwarp-space →