handoff · diff

git:20260618.9c6c22c to git:20260717.294d215

1 added, 1 removed. Audit C to C.

# handoff — ave

End: docs/agents/handoffs/YYYY-MM-DD-HHMM.md

Start: read most recent, run python scripts/validate_records.py.

## End format

# Handoff — date

## Completed

- records/AVE-2026-00049.json — header injection (BadHost) record added

- - rules/semgrep/ave-2026-00049.yaml — detection rule

- tests/fixtures/AVE-2026-00049_positive.md + _negative.md

+ - Coordinated detection-rule PR opened in bawbel/scanner, referencing AVE-2026-00049

## Status

python scripts/validate_records.py → all valid

pytest tests/ -q → N passed

## Next

AVE-2026-00050: database data-path exposure (Mads Hansen suggestion)

First: grill the behavioral_fingerprint.

Note: docs/agents/handoffs/ gitignored.