mirror of
https://github.com/tiennm99/goclaw.git
synced 2026-10-17 10:14:23 +00:00
Extends Telegram group write_file permission coverage with four new fixtures that exercise the edges exposed by the audit: - A.6 EmptySenderDenied: empty SenderID in group context must deny (closes silent-bypass BUG-A) - A.7 SyntheticSendersDenied: 7 sub-cases for subagent:, notification:, teammate:, system:, ticker:, session_send_tool, subagent:delegate: (reporter-reported denial BUG-B) - A.8 PropagatedSenderAllowed: positive case for F2/F3 — once the real sender is propagated through announce re-ingress, a granted user can still write files - A.9 DMEmptySenderPasses: guards against F1's deny-on-empty rule bleeding into DM context Full suite: 9 fixtures, all passing on pgvector pg18.