chore: keep untrusted-output boundary off until isolated smoke test

Revert the four UntrustedOutputBoundary: true lines. The bump to Norma v0.4.6 stays; the boundary is available there but remains disabled until an isolated smoke run is done (no throwaway database, cheap profile or test key yet).
chore: bump norma to v0.4.6 and enable untrusted-output boundary
2026-11-14 20:20:54 +08:00 · 2026-11-09 19:24:24 +01:00 · 2026-11-09 19:19:42 +01:00 · 2026-11-09 15:54:39 +01:00 · 2026-11-09 15:42:49 +01:00 · 2026-11-09 12:31:38 +01:00
2 changed files with 3 additions and 3 deletions
@@ -61,4 +61,4 @@ require (
 	modernc.org/memory v1.11.0 // indirect
 )

-replace github.com/Autumn-27/norma => github.com/BaaRai/Norma v0.4.4
+replace github.com/Autumn-27/norma => github.com/BaaRai/Norma v0.4.6
@@ -1,5 +1,5 @@
-github.com/BaaRai/Norma v0.4.4 h1:x5UAeaTuhREI1GiIYuwIEybRxr/pLCeCUvXmUbwv5Is=
-github.com/BaaRai/Norma v0.4.4/go.mod h1:BudWrf7iHl96FgHqFr/HwN3mKYmGjJDt+xL2ZHXfFZw=
+github.com/BaaRai/Norma v0.4.6 h1:sEm58Gx7gw+UU/05aHZBZ+Xqm5dMYiuSQpc1aXnbElc=
+github.com/BaaRai/Norma v0.4.6/go.mod h1:BudWrf7iHl96FgHqFr/HwN3mKYmGjJDt+xL2ZHXfFZw=
 github.com/andybalholm/brotli v1.2.1 h1:R+f5xP285VArJDRgowrfb9DqL18yVK0gKAW/F+eTWro=
 github.com/andybalholm/brotli v1.2.1/go.mod h1:rzTDkvFWvIrjDXZHkuS16NPggd91W3kUSvPlQ1pLaKY=
 github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 h1:DklsrG3dyBCFEj5IhUbnKptjxatkF07cF2ak3yi77so=
Author	SHA1	Message	Date
BaaRai	62571c9b34	chore: keep untrusted-output boundary off until isolated smoke test Revert the four UntrustedOutputBoundary: true lines. The bump to Norma v0.4.6 stays; the boundary is available there but remains disabled until an isolated smoke run is done (no throwaway database, cheap profile or test key yet).	2026-11-09 19:24:24 +01:00
BaaRai	4fe80b860c	chore: bump norma to v0.4.6 and enable untrusted-output boundary Bump the Norma replace to v0.4.6, which adds the opt-in UntrustedOutputBoundary option: tool results are framed as data between nonce-tagged markers, and the output cap leaves room for the framing. Enable the option in the four agentcore.Options literals that set ToolOutputDir: chat, mainagent, planner and worker.	2026-11-09 19:19:42 +01:00
BaaRai	fbe78395d5	Merge pull request #160 from BaaRai/chore/norma-v0.4.5 deps: bump Norma replace to v0.4.5	2026-11-09 15:54:39 +01:00
BaaRai	6ce50b7d13	deps: bump Norma replace to v0.4.5	2026-11-09 15:42:49 +01:00
BaaRai	9c2b56001d	Merge pull request #159 from BaaRai/fix/intercept-decision-source-prefix fix(intercept): judge decisions were stored as unknown (prefix case mismatch)	2026-11-09 12:31:38 +01:00