Hotfix: enforce deterministic urgent-symptom override at the server boundary #50

timmy · 2026-08-20T16:36:18Z

timmy commented

2026-08-20 16:36:18 +00:00

Closes #48

Independent post-merge review found a medical-safety regression in PR #49: urgent chat interception was browser-only, omitted common phrases, and ignored confirmed ledger flags at the authoritative service boundary.

Fix

One shared urgent-text detector for rectal bleeding, blood in stool, black/dark-red stool, severe/constant abdominal pain, vomiting, fever, and inability to pass gas
Shared confirmed-ledger detector for symptom flags and note language
Authoritative server-side interception before Hermes is called
Browser interception uses the same domain rules
Deterministic response includes safetyOverride: true; Hermes is not invoked

Evidence

RED reproduced missing export and 3 upstream Hermes calls
GREEN: 45/45 full tests
Service regression proves 0 Hermes calls for urgent message, ledger flag, and ledger note
HTTP gateway probes message and ledger bypass attempts
All journal, photo-first, and sleek/chat browser suites pass
Syntax, diff, and dependency audit pass

Release daily-2026-08-20.1 was marked SUPERSEDED pending this hotfix.

Closes #48 Independent post-merge review found a medical-safety regression in PR #49: urgent chat interception was browser-only, omitted common phrases, and ignored confirmed ledger flags at the authoritative service boundary. ## Fix - One shared urgent-text detector for rectal bleeding, blood in stool, black/dark-red stool, severe/constant abdominal pain, vomiting, fever, and inability to pass gas - Shared confirmed-ledger detector for symptom flags and note language - Authoritative server-side interception before Hermes is called - Browser interception uses the same domain rules - Deterministic response includes `safetyOverride: true`; Hermes is not invoked ## Evidence - RED reproduced missing export and 3 upstream Hermes calls - GREEN: 45/45 full tests - Service regression proves 0 Hermes calls for urgent message, ledger flag, and ledger note - HTTP gateway probes message and ledger bypass attempts - All journal, photo-first, and sleek/chat browser suites pass - Syntax, diff, and dependency audit pass Release daily-2026-08-20.1 was marked SUPERSEDED pending this hotfix.

timmy added 1 commit 2026-08-20 16:36:19 +00:00

fix: enforce urgent chat override server-side

Quality gates / quality (pull_request) Successful in 1m34s

Details

48ba3ccacc

timmy force-pushed timmy/48-server-safety-override from 48ba3ccacc to 05b4bafd96

2026-08-20 16:41:49 +00:00

Compare

timmy merged commit cc1fc6ee36 into main

2026-08-20 16:48:03 +00:00

timmy referenced this issue from a commit

2026-08-20 16:48:04 +00:00

Merge pull request 'Hotfix: enforce deterministic urgent-symptom override at the server boundary' (#50) from timmy/48-server-safety-override into main

Sign in to join this conversation.

No reviewers

No Milestone

No project

No Assignees

1 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/timmy-talking-turd#50