SQLiteKit: embedder-bound hardened policy for untrusted SQL#1

Open

ronaldmannak wants to merge 37 commits into

mainfrom

claude/sqlite-implementations-compare-uktp8y

Commits on Jun 18, 2026

SQLiteKit: embedder-bound hardened policy for untrusted SQL
claude
committed
Audit/truncation: address Gemini review (perf + cleanup)
claude
committed
Close in-band policy-bypass gaps from Codex review
claude
committed
Close second-round Codex gaps (multi-stmt temp_store, dump cap, EOF timeout, eqp audit order)
claude
committed
Third-round Codex fixes: Windows build + 3 policy edge cases
claude
committed
Fourth-round Codex fixes: VACUUM INTO, comment-evasion, audit-log-as-DB
claude
committed
Fifth-round Codex fixes: file split, quoted temp_store, audit cap/symlink
claude
committed
Sixth-round Codex fixes: read-only ATTACH, audit stderr, guard false-positives
claude
committed

Commits on Jun 19, 2026

Commits on Jun 20, 2026