Enforce pre-API input validation in experiment state loader (SEC-002)#31002

Merged

pelikhan merged 10 commits intomainfrom

copilot/sec-002-fix-api-call-order

May 8, 2026

Commits on May 8, 2026

Initial plan
Copilot
authored
chore: start SEC-002 remediation plan

Copilot
and
pelikhan
authored
Revert "chore: start SEC-002 remediation plan"

Copilot
and
pelikhan
authored
fix: validate experiment state loader inputs before API fetch

Copilot
and
pelikhan
authored
test: broaden input validation coverage for experiment state loader

Copilot
and
pelikhan
authored
chore: refine validation tests and comments for SEC-002

Copilot
and
pelikhan
authored
fix: reject traversal-like branch names in state loader validation

Copilot
and
pelikhan
authored
fix: enforce strict repository format validation before state fetch

Copilot
and
pelikhan
authored
chore: refine repository validation error messaging and tests

Copilot
and
pelikhan
authored
refactor: simplify strict repository validation for state loader

Copilot
and
pelikhan
authored