fix(storage): reject embedded IPv4 rebinding hosts - #1112

Draft

seonghobae wants to merge 10 commits into

mainfrom

cursor/reject-embedded-ip-rebinding-hosts-206f

Commits on Aug 16, 2026

feat(storage): add executable object-storage contract
seonghobae
committed
96442c5
test(storage): expose object contract trust gaps
seonghobae
committed
5405ab5
ci(storage): verify object contract hardening
seonghobae
committed
9251da4
fix(storage): close object-storage hardening contract
seonghobae
committed
22011b0
fix(storage): drop leftover object-storage write workflow

cursoragent
and
seonghobae
committed
2b0230d
fix(storage): reject numeric IP aliases in host allowlists

cursoragent
and
seonghobae
committed
3f20edb
fix(storage): close special-use SSRF and tenant-binding gaps

cursoragent
and
seonghobae
committed
71b5e4e
fix(storage): require DNS pinning and reject cluster rebinding hosts

cursoragent
and
seonghobae
committed
ed8d782

Commits on Aug 17, 2026

fix(storage): reject embedded IPv4 rebinding hosts

cursoragent
and
seonghobae
committed
28c3f74
fix(storage): reject hyphenated IPv4 rebinding labels

cursoragent
and
seonghobae
committed
1159842