[audit-high] MCP example pinned one retry key and hid a failed replay

.dockerignore

@@ -0,0 +1,74 @@
+# Image builds use the repository root as the context. See gateway/Dockerfile.
+.git
+.github
+.agents
+**/.agents
+.claude
+**/.claude
+.envrc
+**/.envrc
+.vercel
+**/.vercel
+.railway
+**/.railway
+.venv
+**/.venv
+.venv-local
+**/.venv-local
+venv
+**/venv
+env
+**/env
+node_modules
+**/node_modules
+.aws
+**/.aws
+.ssh
+**/.ssh
+.netrc
+**/.netrc
+.npmrc
+**/.npmrc
+.pypirc
+**/.pypirc
+.pytest_cache
+**/.pytest_cache
+.ruff_cache
+**/.ruff_cache
+__pycache__
+**/__pycache__
+*.py[cod]
+**/*.py[cod]
+*.pyo
+**/*.pyo
+*.pyd
+**/*.pyd
+.env
+**/.env
+.env.*
+**/.env.*
+*.db
+**/*.db
+*.db-wal
+**/*.db-wal
+*.db-shm
+**/*.db-shm
+*.log
+**/*.log
+*.pem
+**/*.pem
+*.key
+**/*.key
+railway.json
+**/railway.json
+railway.toml
+**/railway.toml
+gateway/tests
+gateway/data
+gateway/docker-compose.yml
+gateway/docker-compose.prod.yml
+sdk/typescript
+integrations
+examples
+spec
+verifier

.github/scripts/smoke_gateway_image.sh

@@ -0,0 +1,96 @@
+#!/usr/bin/env bash
+# Build both gateway images and import the modules needed at app startup.
+set -euo pipefail
+
+if [[ -e .build_commit_sha || -L .build_commit_sha ]]; then
+  echo '.build_commit_sha already exists; refusing to replace it' >&2
+  exit 1
+fi
+
+canary_paths=(
+  gateway/data/quickstart/signing-seed.b64
+  .amw-image-smoke.db-wal
+  gateway/.amw-image-smoke.db-shm
+  gateway/.amw-image-smoke.log
+  gateway/.amw-image-smoke.pem
+  gateway/.agents/amw-image-smoke.txt
+  gateway/.claude/amw-image-smoke.txt
+  gateway/.envrc
+  sdk/python/.amw-image-smoke.key
+)
+for path in "${canary_paths[@]}"; do
+  if [[ -e "$path" || -L "$path" ]]; then
+    echo "Canary path already exists: $path" >&2
+    exit 1
+  fi
+done
+
+created_dirs=()
+created_files=()
+stamp_created=false
+cleanup() {
+  if [[ "$stamp_created" == true ]]; then rm -f .build_commit_sha; fi
+  for path in "${created_files[@]}"; do rm -f "$path"; done
+  for ((i=${#created_dirs[@]}-1; i>=0; i--)); do
+    rmdir "${created_dirs[i]}" 2>/dev/null || true
+  done
+}
+trap cleanup EXIT
+
+for dir in gateway/data gateway/data/quickstart gateway/.agents gateway/.claude; do
+  if [[ -L "$dir" ]]; then
+    echo "Canary parent is a symlink: $dir" >&2
+    exit 1
+  fi
+  if [[ ! -d "$dir" ]]; then
+    mkdir "$dir"
+    created_dirs+=("$dir")
+  fi
+done
+for path in "${canary_paths[@]}"; do
+  printf 'synthetic image context canary\n' > "$path"
+  created_files+=("$path")
+done
+
+# A named COPY of an ignored canary must fail before creating any layer.
+for path in "${canary_paths[@]}"; do
+  if printf 'FROM scratch\nCOPY %s /probe/\n' "$path" | docker build -f - . >/dev/null 2>&1; then
+    echo "Docker context unexpectedly includes $path" >&2
+    exit 1
+  fi
+done
+
+image_canaries=(
+  /app/data/quickstart/signing-seed.b64
+  /app/.amw-image-smoke.db-shm
+  /app/.amw-image-smoke.log
+  /app/.amw-image-smoke.pem
+  /app/.agents/amw-image-smoke.txt
+  /app/.claude/amw-image-smoke.txt
+  /app/.envrc
+  /sdk/python/.amw-image-smoke.key
+)
+stamp="$(git rev-parse HEAD)"
+printf '%s\n' "$stamp" > .build_commit_sha
+stamp_created=true
+
+docker build -f gateway/Dockerfile -t amw-gateway:ci-release .
+docker run --rm --network none --read-only --entrypoint python amw-gateway:ci-release -c '
+import sys
+from pathlib import Path
+import app.main
+import b2a_sdk.receipt_verifier
+assert Path("/app/.build_commit_sha").read_text().strip() == sys.argv[1]
+assert all(not Path(path).exists() for path in sys.argv[2:])
+' "$stamp" "${image_canaries[@]}"
+
+rm .build_commit_sha
+docker build -f gateway/Dockerfile.dev -t amw-gateway:ci-dev .
+docker run --rm --network none --read-only --entrypoint python amw-gateway:ci-dev -c '
+import sys
+from pathlib import Path
+import app.main
+import b2a_sdk.receipt_verifier
+assert not Path("/app/.build_commit_sha").exists()
+assert all(not Path(path).exists() for path in sys.argv[1:])
+' "${image_canaries[@]}"