MaverickHQandClaude Opus 5.5 07a77acbb0 fix(posting_guard): decode text spelled in invisible characters ...

clean_text removed zero-width, bidi, soft-hyphen and BOM characters,
but Unicode tag characters (U+E0000-E007F, which shadow ASCII one for
one) and runs of variation selectors (one byte each) went into the
cleaned text untouched. An instruction spelled in them renders as
nothing on the page or in the terminal and still reads as text to the
model, so the gate passed it as clean.

Both are now removed and counted. What a tag run or a selector run
spells is decoded into a new invisible_text finding, scanned like
hidden content (so instruction_like and hidden_urls see it), and
raises the verdict's warning. Emoji subdivision flags and a lone
variation selector are counted, not flagged. /apply's list of findings
to show gains the new one.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-27 16:07:33 +01:00

..

add-portal.md

fix(portals): keep hidden markup and invisible characters out of CLI output

2026-10-27 16:07:33 +01:00

add-template.md

feat(add-template): keep a registered template's intermediates in build/ (#473) (#474)

2026-09-21 08:20:10 +02:00

apply.md

fix(posting_guard): decode text spelled in invisible characters

2026-10-27 16:07:33 +01:00

expand.md

fix(specs): carry the untrusted-input rule into every spec that reads third-party content

2026-10-27 16:07:33 +01:00

gmail-sync.md

fix(specs): carry the untrusted-input rule into every spec that reads third-party content

2026-10-27 16:07:33 +01:00

html-report.md

fix(html-report): funnel from stage history, rejection rate from true rejections

2026-08-19 20:54:46 +02:00

interview.md

fix(specs): carry the untrusted-input rule into every spec that reads third-party content

2026-10-27 16:07:33 +01:00

notion-sync.md

fix(specs): carry the untrusted-input rule into every spec that reads third-party content

2026-10-27 16:07:33 +01:00

outcome.md

fix(specs): carry the untrusted-input rule into every spec that reads third-party content

2026-10-27 16:07:33 +01:00

rank.md

fix(specs): settle every workflow spec on python3, one Windows note at first use (#678)

2026-10-20 08:27:21 +02:00

reset.md

fix(reset): make the documents reset block POSIX so it runs under zsh (#699)

2026-10-21 07:10:50 +02:00

setup.md

fix(specs): carry the untrusted-input rule into every spec that reads third-party content

2026-10-27 16:07:33 +01:00