fix(security): consolidate HTTP 500 info-disclosure hardening + preserve client 4xx - #821

Closed

groupthinking wants to merge 7 commits into

mainfrom

claude/determined-maxwell-bloicm

Commits on Jul 17, 2026

fix(security): sanitize all HTTP 500 responses to prevent info disclosure (supersedes #801)
claude
committed
31804b9
fix: resolve main merge conflicts
Copilot
authored
4c9b205
fix(security): close dict/variable 500-detail leaks and harden the guard
claude
committed
448fe68
fix(security): address review — global handler leak, persisted-error leak, 400→500 swallow
claude
committed
93d4847
fix(api): preserve client 4xx in multi-provider route; align 500-handler test
claude
committed
53fa3fc
Merge remote-tracking branch 'origin/main' into claude/determined-maxwell-bloicm
claude
committed
e802f72
fix(security): close positional 500 leaks + AST guard; lock 4xx/persist-error tests
claude
committed
aee31b4