perplexity/Timmy-time-dashboard
Archived
1
0
Fork 0
forked from Rockachopa/Timmy-time-dashboard
Code Issues Pull Requests 1 Activity

Remove stale references from documentation across 9 files (#139)

Browse Source
This commit is contained in:
Alexander Whitestone
2026-03-07 07:28:14 -05:00
committed by GitHub
parent 480b8d324e
commit 39f2eb418a
9 changed files with 83 additions and 169 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
docs/SECURITY.md
View File

@@ -23,10 +23,10 @@ Timmy Time is built on the principle of **AI Sovereignty**. Security is not just
A manual audit of the codebase identified the following security-sensitive areas:
### 1. Self-Modification Loop (`src/self_coding/self_modify/loop.py`)
- **Observation:** Uses `subprocess.run` for git and test commands.
### 1. Self-Modification Loop *(planned, not yet implemented)*
- **Observation:** When implemented, the self-modify loop will use `subprocess.run` for git and test commands.
- **Risk:** Potential for command injection if user-provided instructions are improperly handled.
- **Mitigation:** Input is currently restricted to git operations and pytest. Future versions should further sandbox these executions.
- **Mitigation:** Input should be restricted to git operations and pytest. Future versions should sandbox these executions.
### 2. Model Registration (`src/dashboard/routes/models.py`)
- **Observation:** Allows registering models from arbitrary local paths.