ilaandClaude Fable 5 a2cda73deb Add Phase 4 launch/update/self-update review with cross-check ruling ...

Code-level audit of T-401~T-403: launch has no command-injection surface
(AppID-only request, entrypoint must be in recorded installed files,
safepath+JoinUnder+Lstat, no-arg exec.Command and parameterless
ShellExecuteExW), update never force-kills (confirm + natural-exit wait
only), and self-update is journaled, rollback-capable and health-gated
before backup deletion. Confirms Phase 3 O1 is closed by T-401's
preSwitchCheck.

Ruling accepts Codex's follow-up: O4 (self-flagged T-403 fault-injection
and mid-phase Recover test gaps - all four claims verified) and O5
(split assembly prerequisites instead of lumping them under T-502).
Adds a low-cost path to close O4 mostly via the existing DirectorySyncer
seam and filesystem permission tricks, without new production seams.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-19 23:44:01 +08:00

..

phase0-skeleton-review.md

Define workspace isolation task (T-604)

2026-07-16 21:15:40 +08:00

phase1-security-review.md

Freeze catalog signature vectors (T-614)

2026-07-18 16:46:17 +08:00

phase2-review.md

Implement unsafe icon cache diagnostics (T-611)

2026-07-18 15:18:29 +08:00

phase3-review.md

Add Phase 3 review cross-check ruling

2026-07-19 20:06:55 +08:00

phase4-review.md

Add Phase 4 launch/update/self-update review with cross-check ruling

2026-07-19 23:44:01 +08:00

remediation-t606-t614-review.md

Add T-606~T-614 remediation review; ignore editor workspace

2026-07-18 17:05:00 +08:00