dtoro 53823595de fix: add ethtool, lsmod, lspci, modinfo, dkms to read-only command allowlist ...

Read-only diagnostic commands ethtool, lsmod, lspci, modinfo, and dkms
were missing from the readOnlyLeadPattern in the command classifier,
causing compound diagnostic commands (e.g. 'uname -r && ethtool -i eno1
&& lsmod | grep r8169') to be misclassified as config_mutation instead
of read_only. This forced operator approval for simple hardware/driver
inspection during the 2026-08-12 hubris NIC cutover session.

Added regression test with the exact compound command from that session.

2026-08-12 13:27:33 +02:00

..

classify_test.go

test: add unit tests for 6 previously-untested packages (R7)

2026-07-17 22:54:44 +02:00

classify.go

test: add unit tests for 6 previously-untested packages (R7)

2026-07-17 22:54:44 +02:00

command_test.go

fix: add ethtool, lsmod, lspci, modinfo, dkms to read-only command allowlist

2026-08-12 13:27:33 +02:00

command.go

fix: add ethtool, lsmod, lspci, modinfo, dkms to read-only command allowlist

2026-08-12 13:27:33 +02:00

risk_test.go

0.29.0 — code-quality refactor (plan E1–E5): file splits, sqlc migration, SSH unification, test coverage

2026-08-08 22:47:06 +02:00