3 Commits

Include renames

Author	SHA1	Message	Date
AIOS Governed Continuation	abe81d7f64	fix(sec): port G7 security-critical closure (S1-S5 + negative tests) onto final integration tree ... Ported from authority branch agent/g7-security-critical-closure-20260914 (d5f5c9b, base=beabd053). S1 auth: role/user from server token->identity mapping, ignore client X-AIOS-* headers. S2 bootstrap credential: PBKDF2 random-salt, fail-closed SECRET, no plaintext fallback, session HMAC+expiry. S3 path containment + control-plane file-read hardening. S4 admin UI XSS + real governed approval + dashboard CSRF/branch validation. S5 runtime delivery: registry.yaml conflict, openapi securityScheme, install.sh fail propagation, do_POST shadowing. Tests: 5 negative suites (66 tests). Evidence pack in deliverables/g7-evidence/.	2026-09-14 22:11:51 +08:00
openclaw	d194d3a4d7	Add Owner Gate Web UI panels with approve/reject functionality	2026-07-09 17:23:23 +08:00
openclaw	c93f99da41	feat: add AI evolution dashboard API endpoint ... - Serve HTML dashboard at /admin/ai-evolution/ - API endpoint /admin/ai-evolution/api/data returning baseline, versions, commands, agent_runs - Background agent runner base class for autonomous file operations - Chat API sync service with real-time message polling and task execution - Add admin route to aios_chatgpt_actions_api.py, fix missing start_time variable	2026-07-09 00:24:23 +08:00