Cross-chat prompt injection: the privacy tier is the only boundary - #137

Merged

Broccolito merged 6 commits into

mainfrom

claude/cross-chat-prompt-injection-a2c5fc

Aug 27, 2026

Commits on Aug 26, 2026

feat(workspace): let an agent inject a prompt into any chat, not only a child
Broccolito
committed
200205a
test(workspace): serialize the new live-feed tests on the workspace_services lock
Broccolito
committed
b91ba22

Commits on Aug 27, 2026

fix(desktop): stop Biorouter's own extensions announcing themselves, and let toasts expire
Broccolito
committed
91740f0
fix(desktop): an injected message must not make an idle chat claim a running turn
Broccolito
committed
3117b3d
ci: do not let a third-party apt repository outage fail a Linux job
Broccolito
committed
3b53905
test(workspace): stop cross-test frames leaking through the shared services fake
Broccolito
committed
18a9a1f