Chinesezjc ea1d28a068 fix(code-runtime-python): bound the open-merge hold by the ledger budget ... The review's critical: the open-merge branch accumulated the held fragment before any ledger check, so a forged open flood could grow host memory without touching logBudget. The held fragment is now bounded by the exact-cost walk (jsonStringCostUpTo against the remaining budget; the closing frame's admit() still bills the merged entry once), and the open field is registered in the README wire-contract section and the fd-3 protocol note (en + zh). A forged open-flood case asserts truncation to the marker under a 64-byte budget.		2026-08-31 15:03:20 +08:00
..
notes	fix(code-runtime-python): bound the open-merge hold by the ledger budget	2026-08-31 15:03:20 +08:00
skills	refactor(session)!: remove SQLite persistence backend	2026-08-31 13:23:07 +08:00