fix: audit batch 1 — critical Android updater + security hardening + bug fixes#695

Merged

appergb merged 15 commits into

betafrom

fix/audit-batch1-security-bugs

Jun 17, 2026

Commits on Jun 17, 2026

fix(android): SUPPORTED_ABIS accessed via get_static_field not call_static_method
sim
committed
fix(persistence): acquire Mutex before disk write in PreferencesStore::set
sim
committed
fix(coordinator): QaShortcutPressed uses block_on to prevent spawn race
sim
committed
fix(coordinator): clear focus_target in run_voice_agent_transcript
sim
committed
fix(build): update stale windows-startup-lifecycle contract test
sim
committed
fix(security): restrict coding_agent exe to allowlist and main window only
sim
committed
fix(security): add main-window guard to less_computer_approve
sim
committed
fix(security): validate Android update URL against trusted prefixes before download
sim
committed
fix(security): add global PIN failure rate-limit to remote server
sim
committed
fix(security): prioritize direct GitHub endpoint over fastgit.cc mirror
sim
committed
fix(security): sanitize window title before embedding in LLM system prompt
sim
committed
fix(security): use rejection sampling in generate_pin to eliminate modulo bias
sim
committed
fix(android): use startService for REPLACE_OVERLAY and REFRESH_LAYOUT actions
sim
committed
fix(android): add 200 MB size guard to APK download buffer
sim
committed
fix(security): scope less_computer_approve to the Less Computer window, not main
appergb
committed