Search results

git-force-push fires on PROSE: the rule never required git to be a command — writing up a denial gets denied

Status: Open.

#195 In Drakon-Systems-Ltd/ShieldCortex;

· jarvis-drakon opened on Aug 3, 2026

Write-then-exec re-arms a heredoc body when the file is merely NAMED as an argument — catastrophic-tier block on writing a test and running it

Status: Open.

#194 In Drakon-Systems-Ltd/ShieldCortex;

· jarvis-drakon opened on Aug 3, 2026

modify-network-firewall matches the tool, never the verb — ufw status and iptables -L gate as hard as ufw disable

Status: Open.

#193 In Drakon-Systems-Ltd/ShieldCortex;

· jarvis-drakon opened on Aug 3, 2026

Audit rows record the rule but not the matched span — the durable record cannot explain a folded-source denial

Status: Open.

#192 In Drakon-Systems-Ltd/ShieldCortex;

· jarvis-drakon opened on Aug 3, 2026

Action Guard FP: git-force-push spans statement separators and matches unanchored -f/+ — denied a backup cron's plain push

Status: Open.

#191 In Drakon-Systems-Ltd/ShieldCortex;

· jarvis-drakon opened on Aug 3, 2026

Action Guard FP: a path literal inside an inline one-liner is folded as shell — the guard's own audit log denies the commands that read it

Status: Open.

#190 In Drakon-Systems-Ltd/ShieldCortex;

· jarvis-drakon opened on Aug 3, 2026

touch-sensitive-path fires on folded interpreter source — a permission-auditing script cannot name the files it audits

Status: Open.

#189 In Drakon-Systems-Ltd/ShieldCortex;

· jarvis-drakon opened on Aug 3, 2026

Action Guard FP: a shell verb in interpreter CODE position is an identifier, not a command — hard-denied a production security cron for 2.5 days

Status: Open.

#188 In Drakon-Systems-Ltd/ShieldCortex;

· jarvis-drakon opened on Aug 3, 2026

Transitive verdicts cite a pattern with no provenance — operator reads the invoked file and the match isn't there

bugSomething isn't workingSomething isn't working

Status: Open.

#184 In Drakon-Systems-Ltd/ShieldCortex;

· jarvis-drakon opened on Aug 2, 2026

Approval hash covers the whole tool-input blob (incl. description) — operators and retrying crons cannot spend their own approvals

bugSomething isn't workingSomething isn't working

Status: Open.

#183 In Drakon-Systems-Ltd/ShieldCortex;

· jarvis-drakon opened on Aug 2, 2026

Guard rules ship with an unmeasured FP rate: wire replay-guard-corpus into CI as a blocking precision gate

Status: Open.

#182 In Drakon-Systems-Ltd/ShieldCortex;

· jarvis-drakon opened on Aug 2, 2026

shieldcortex-realtime: runtime.mjs resolution fails on ~/.local installs; candidate 1 resolves to a non-existent scoped path

Status: Open.

#174 In Drakon-Systems-Ltd/ShieldCortex;

· jarvis-drakon opened on Aug 1, 2026