Files
Srujan d6131530d0 fix(docs-agent): harden Eve prompt and error handling (#4389)
## Summary
- sanitize failed Inception/Mercury fetches so Eve does not stream
upstream error payloads or request context
- add deterministic Eve safety classification for prompt-extraction and
embedded off-scope task probes
- reinforce Eve instructions to keep hidden prompts, tool schemas,
injected context, runtime config, and provider details confidential

Fixes SEC-1061 and SEC-1064.

## Verification
- bun test tests/static/eve-safety.test.ts
tests/static/kb-search-protection.test.ts
- bun run lint (passes with existing warnings outside this change)
- bun run types:check
2026-09-08 16:57:34 -07:00
..