fix(security): contract SQL runs in DuckDB's sandbox, confined to what the contract may declare - #689

Merged

fas89 merged 7 commits into

mainfrom

fix/duckdb-lockdown

Oct 2, 2026

Commits on Oct 2, 2026

fix(security): contract SQL runs in DuckDB's sandbox, so it cannot read the host
fas89
committed
14f89fa
fix(security): a declared location is confined, and one failed action no longer fails the run
fas89
committed
29271f0
fix(security): a symlinked runtime or a sqlite source no longer reaches the host, and a glob reads what DuckDB expands
fas89
committed
f6b21c0
fix(security): a '[', '?' or '*' in a directory's name no longer refuses the contract under it
fas89
committed
f974f17
chore(secrets): test sentinels carry the allowlist pragma, and the DSN example names its password
fas89
committed
10a521d
fix(contract-tests): a failed connection close is logged, and the skip helper raises its skip
fas89
committed
f0b3135
docs: describe the threat model, not a product
fas89
committed
f7e9aaa