Make Fisherman's replicate mode trustworthy - #160

Merged

DavertMik merged 25 commits into

mainfrom

fisherman-reliability

Aug 31, 2026

Commits on Aug 29, 2026

docs: fisherman reliability spec and implementation plan

DavertMik
and
claude
committed
6f0f395
fix(fisherman): stop replicate mode reading its own past requests as captures

DavertMik
and
claude
committed
4e7199c
fix(fisherman): rank captured examples — exact path, then success, then recency

DavertMik
and
claude
committed
8eb758c
fix(fisherman): scope endpoint list by shared URL segment, announce degradation

DavertMik
and
claude
committed
15737b6
fix(fisherman): namespace extracted response fields so body data cannot clobber HTTP status

DavertMik
and
claude
committed
fdb9a69
fix(fisherman): verify finish against the request ledger, synthesize result on exhaustion

DavertMik
and
claude
committed
79f8044
fix(fisherman): stop after repeated failures on one endpoint, forbid substitute types

DavertMik
and
claude
committed
c6487a2
test(fisherman): integration coverage for scoped prompts and ledger-gated finish

DavertMik
and
claude
committed
52d26c9
docs: changelog for fisherman reliability fixes

DavertMik
and
claude
committed
6e4b585
fix(fisherman): never scope the endpoint list by an id-shaped page segment

DavertMik
and
claude
committed
e738226
refactor(fisherman): RequestMap holds creating requests, created items name their request

DavertMik
and
claude
committed
c884292

Commits on Aug 30, 2026

Plan and spec for live-session auth

DavertMik
and
claude
committed
316837f
Extract auth headers only from current-session captures

DavertMik
and
claude
committed
44ae320
Apply live browser session headers over captured ones

DavertMik
and
claude
committed
9cdb1c7
Send only cookies scoped to the API origin

DavertMik
and
claude
committed
d1b593c
Read the live CSRF token from the page meta tag

DavertMik
and
claude
committed
0710747
Merge remote-tracking branch 'origin/main' into fisherman-reliability
DavertMik
committed
d77df23
Changelog for live-session auth

DavertMik
and
claude
committed
928aac8
Never treat version segments as dynamic ids

DavertMik
and
claude
committed
c919f66
Treat a no-tool-call turn as Fisherman's finish

DavertMik
and
claude
committed
04307c2

Commits on Aug 31, 2026

Never let an abandoned Fisherman run report success

DavertMik
and
claude
committed
8088ec8
Never read a short hex word as an id

DavertMik
and
claude
committed
fd66ff0
Degrade the scope instead of guessing between tied segments

DavertMik
and
claude
committed
7aab4fc
Changelog for the review fixes

DavertMik
and
claude
committed
e1a6da3
Merge remote-tracking branch 'origin/main' into fisherman-reliability
DavertMik
committed
ef7d9f4