Security audit fixes: untrusted-load hardening, binding panics, integration data-integrity, x86 scalar fallback#108

Merged

RyanCodrai merged 13 commits into

mainfrom

security/audit-fixes

Jun 10, 2026

Commits on Jun 10, 2026

fix(io): validate index header before allocation on load (V1+V2)

RyanCodrai
and
claude
committed
fix(python): raise ValueError on non-finite search queries (V3)

RyanCodrai
and
claude
committed
fix(agno): keep all vectors for duplicate derived doc_id (V4, #104)

RyanCodrai
and
claude
committed
refactor: shared DuplicatePolicy/resolve_duplicates for integrations

RyanCodrai
and
claude
committed
fix(search): correct x86 scalar fallback code layout (V5, #106)

RyanCodrai
and
claude
committed
harden(python): map result-shape errors to RuntimeError, not panic (V6)

RyanCodrai
and
claude
committed
test(search): end-to-end x86 scalar-fallback vs SIMD parity (V5/#106)

RyanCodrai
and
claude
committed
fix(core): reject zero-dim lazy add instead of dividing by zero (V7)

RyanCodrai
and
claude
committed
fix(agno): delete-by-attribute must not over-delete on doc_id collision (V8)

RyanCodrai
and
claude
committed
fix(io): cap dim at MAX_DIM (65536) to bound rotation-matrix alloc (V9)

RyanCodrai
and
claude
committed
chore: remove dead repack_3bit

RyanCodrai
and
claude
committed
fix(integrations): validate side-car against index at load (V10)

RyanCodrai
and
claude
committed
test(llama_index): don't assert metadata_separator round-trip

RyanCodrai
and
claude
committed