skills/ruvnet__ruflo
1
0
Fork 0
mirror of https://github.com/ruvnet/ruflo.git synced 2026-09-14 14:01:28 +08:00
Code Issues Packages Projects Releases Wiki Activity
7,435 Commits 580 Branches 1,645 Tags
ci/control-current-main
Commit Graph

3 Commits

Author SHA1 Message Date
ruvnet e332689b8c fix(release): harden hooks, statusline, security, and plugin MCP integration 2026-07-16 23:06:29 -04:00
ruv 6198abfab7 fix(plugins): reconcile stale smoke contract assertions across 23 plugins 
full-system-test surfaced 23/32 plugin smoke contracts failing on a
single drifted assertion: the smoke gate greps ADR-0001 for
`status: Proposed`, but those ADRs were long since promoted to
`Accepted` without updating the gate. Flip the assertion (label, grep,
message) Proposed -> Accepted only where the ADR is genuinely Accepted.

ruflo-core additionally had a stale version assertion (0.2.0 -> 0.2.2).

Left untouched: ruflo-adr, ruflo-browser, ruflo-intelligence — their
ADR-0001 is genuinely Proposed, so their smokes correctly assert it.
No plugin source or ADR changed — only the drifted test assertions.

All 32 plugin smoke contracts now pass; full-system-test is 4/4 green.

Co-Authored-By: RuFlo <ruv@ruv.net>
 2026-05-29 15:00:34 -04:00
Reuven 9982c701fa feat(ruflo-aidefence): adopt plugin contract + canonicalize 3-gate pattern (ADR-0001) 
Joins the cadence: pin → ADR (Proposed) → smoke → namespace coordination.
Plus this plugin canonicalizes the 3-gate pattern that ruflo-browser
ADR-0001 §4 codified — every consumer plugin handling untrusted content
should apply these gates in order:

1. Pre-storage PII (aidefence_has_pii) — before any AgentDB / memory_store
2. Sanitization (aidefence_scan) — for cookies / tokens / high-entropy blobs
3. Prompt-injection (aidefence_is_safe) — for content re-entering an LLM

Changes:
- ADR-0001 (Proposed) at docs/adrs/0001-aidefence-contract.md
- README adds Compatibility (pin v3.6), 3-gate pattern table,
  Namespace coordination (defers to ruflo-agentdb ADR-0001, claims
  security-patterns), Verification + Architecture Decisions sections
- plugin.json keywords add prompt-injection, defense-in-depth, mcp
  (already at v0.2.0 — no version bump needed)
- scripts/smoke.sh — 10 structural checks: version + keywords, all 6
  aidefence_* tools referenced, transfer_detect-pii reference, v3.6 pin,
  namespace coordination, 3-gate pattern complete, defence-in-depth block
  intact, ADR Proposed, skill frontmatter valid, no wildcard tools

Verification: bash plugins/ruflo-aidefence/scripts/smoke.sh → 10/10

Co-Authored-By: RuFlo <ruv@ruv.net>
 2026-05-04 19:47:25 -04:00