fix: assorted small validation and robustness fixes - #2450

Open

andrewwhitecdw wants to merge 9 commits into

NVIDIA:mainfrom

andrewwhitecdw:fix-assorted-validation-robustness/aw

Commits on Jul 31, 2026

fix(server): reject non-ASCII characters in Kubernetes label validation
andrewwhitecdw
committed
fix(cli): guard server-supplied string truncation against panics
andrewwhitecdw
committed
fix(sandbox): include port 49152 in ephemeral range note
andrewwhitecdw
committed
fix(cli): guard UTF-8 hash slicing and add boundary tests
andrewwhitecdw
committed
fix(cli): use short_hash in remaining policy hash display paths
andrewwhitecdw
committed
fix(server): include 49152 in gateway ephemeral-port security note
andrewwhitecdw
committed
ci: trigger fresh CI run
andrewwhitecdw
committed
test(cli): use a genuinely UTF-8-splitting case in short_hash test
andrewwhitecdw
committed
style(server): apply rustfmt to policy.rs test asserts
andrewwhitecdw
committed