Yijia-Xiao 5a26ae17a1 harden(dataflows): bound the Reddit feed read before parsing ...

- ElementTree does not resolve external entities, so the reported XXE flag
  doesn't apply; the real residual is an unbounded read of untrusted network XML
- cap both the RSS and JSON reads at 5 MiB; overflow degrades to empty / RSS
  fallback through the existing failure paths #1206 #1276

2026-09-01 05:14:23 +00:00

..

agents

fix(agents): stop the debate managers forcing a direction under ambiguity

2026-09-01 05:08:49 +00:00

dataflows

harden(dataflows): bound the Reddit feed read before parsing

2026-09-01 05:14:23 +00:00

graph

fix(memory): don't settle a decision before its holding window trades

2026-08-31 01:55:31 +00:00

llm_clients

feat(llm): add the GPT-5.6 family and GLM-5.3

2026-08-31 02:55:21 +00:00

__init__.py

chore(lint): make the repository ruff-clean under the strict select

2026-06-14 16:38:36 +00:00

default_config.py

feat(llm): add the GPT-5.6 family and GLM-5.3

2026-08-31 02:55:21 +00:00

reporting.py

feat(reporting): share the report-tree writer between the CLI and the API

2026-06-21 23:22:30 +00:00