ochenstarik/randomayzer
1
0
Fork 0
Code Issues Pull requests 2 Projects Releases Packages Wiki Activity Actions
randomayzer/agents/codex/inbox/2026-10-19-auditor2-high-vk-items.md

812 B
Raw Blame History

Assignment — auditor2 HIGH: malformed VK likes/comments

Base SHA: 17faecd962c2cf40e0a3f6ec4434811cfffdd312

Fix only src/providers/vk/vk-provider.ts and tests/vk-r3-safety.test.ts for the auditor2 HIGH finding in agents/codex/done/2026-10-19-auditor2.md. Reject malformed likes/comment records, malformed optional comment profile data, and duplicate likes IDs with VkIncompleteDataError before participant persistence. Valid positive safe-integer user IDs are accepted. Valid negative integer comment authors may be excluded under an explicit documented community-author policy. Add route-level regression coverage showing old stored participants survive malformed likes/comments responses. No existing tests edits, no commit, no auth/provider capability changes, and no edits to unrelated files.