Fix/hunt2 runtime

[queil]

No description provided.

[strix-security]

Strix Security Review

Warning

This pull request has 43 commits after the last Strix review (ea0846b). Strix has not reviewed these changes.
Automatic review on push is off for this repository. To review the latest changes, tag @strix-security in a comment, or turn on re-review on push.

No security issues found.

Review summary

Reviewed PR #371 ("Fix/hunt2 runtime") in full: every changed source file under src/Weir (Program, Script, Session, Builtins, Can, Check, Contracts, Eval, Fmt, Http, Parser, Prelude, Proc, SchemaTypes, Serve) was read end-to-end and its data flows traced, along with the supporting docs, skills, tests, CI, and tooling changes. The changes are defensive hardening — request-body size limits (413 responses), strict UTF-8 source decoding, symlink-aware lockfile path confinement, credential-header filtering on cross-origin redirects, refusal of command execution during module import, teardown/kill race fixing, and stack-depth and linear-time fixes — and introduce no new security vulnerabilities. No hardcoded secrets or attacker-controllable sinks were introduced.

_{Updated for ea0846b.}

---

Reviewed by Strix
_{Re-run review · Configure security review settings}