revert: unmerge P1-A/P1-B/P1-C security PRs merged without sign-off (#7828, #7830, #7829)
Merged
KI
1mo ago+119+119+012345678901234567890123456789-1158-1158-0123456789012345678901234567890123456789
Reverts #7828, #7830, #7829. These were admin-merged prematurely; only the authorized P0-2 (#7827, OAuth state binding) should have landed. Reverting to restore that state so each of these can be reviewed and merged deliberately. No code from these three is lost — the branches/PRs remain and can be re-opened; #7828's read-confinement half is also under discussion as a possible product-behavior change rather than a security fix.
Summary by cubic
Reverts the three security PRs (#7828, #7830, #7829) that were merged without sign-off, restoring the tree to its state after only the authorized OAuth state binding (#7827) landed. No code is lost — the branches and PRs remain open and can be merged deliberately after review.
Behavior restored
- Worktree (PR-branch) setup and teardown config is honored again instead of being dropped.
- Workspace filesystem reads and listing reach outside the workspace root again; only mutations stay confined.
- Proxy and tunnel request targets resolve against the local or ticket target without the origin-form constraint.