3 Commits

Include renames

Author	SHA1	Message	Date
Haozhe Wu	2cd47cd166	fix(core): narrow backtest subprocess environment ... Closes #332 Summary: - Narrow generated-backtest subprocess environment inheritance to OS/Python basics, proxy/certificate settings, allowed run-root config, and read-only market-data settings. - Avoid forwarding LLM provider keys, API auth tokens, shell-tool switches, broker trading secrets, and live/advisory toggles into generated strategy code. - Document the generated backtest trust boundary in README and SECURITY. Validation: - PYTHONPATH=agent pytest agent/tests/test_runner_env.py agent/tests/test_run_card.py agent/tests/test_path_safety.py agent/tests/test_file_tool_sandbox_security.py -q - python -m ruff check agent/src/core/runner.py agent/tests/test_runner_env.py - python -m compileall -q agent/src/core/runner.py agent/tests/test_runner_env.py - git diff --check - GitHub Actions CI passed	2026-07-02 15:23:41 +08:00
Haozhe Wu	83a33dfef1	docs(security): document official Discord + wallet-impersonation warning ... Adds an 'Official channels & impersonation' section pointing to the only official Discord (HKUDS server) and warning that any wallet 'verification' prompt is a scam, after the 2026-06-18 impostor-Discord incident.	2026-06-18 22:33:34 +08:00
warren618	940624a2d6	docs: add CODE_OF_CONDUCT and SECURITY policy ... Add Contributor Covenant v2.1 and security vulnerability reporting guide to improve GitHub Community Health score.	2026-04-13 18:50:16 +08:00