Add microkernel security enforcement layer: signatures, config validation, permissions#490

Merged

hotlong merged 9 commits intomainfrom

copilot/scan-kernel-code-against-spec

Feb 2, 2026

Commits on Feb 2, 2026

Initial plan
Copilot
committed
Add core security features: signature verification, config validation, permission enforcement

Copilot
and
xuyushun441-sys
committed
Add comprehensive security tests and plugin security guide

Copilot
and
xuyushun441-sys
committed
Fix signature verifier: correct ECDSA handling and improve crypto module loading

Copilot
and
xuyushun441-sys
committed
Fix ECDSA signature verification: use lowercase 'sha256' for ES256 algorithm

Copilot
and
xuyushun441-sys
committed
Initial plan
Copilot
committed
Fix TypeScript compilation errors in packages/core/src/security/

Copilot
and
hotlong
committed
Fix remaining TypeScript errors: use issues instead of errors, change silent to error log level

Copilot
and
hotlong
committed
Merge pull request #491 from objectstack-ai/copilot/update-action-step-logic
hotlong
authored