v3.1.2 — Security: Path Traversal Fix + ClawHub Live

[Jovancoding]

Security Fix

• Path traversal protection in scripts/blackboard.py — change_id is now validated with regex whitelist (^[a-zA-Z0-9_\-\.]+$) and resolved path boundary checks
• Blocks both Unix (../../etc/passwd) and Windows (..\windows\system32) traversal attacks
• Applied to propose_change, validate_change, commit_change, abort_change, and archive paths
• Found by VirusTotal during ClawHub security scan

Distribution

• npm: npm install network-ai@3.1.2
• ClawHub: clawhub install network-ai — live on clawhub.ai
• Security scan: Benign (VirusTotal 0/64)

Docs

• README updated: version badge, ClawHub install instructions (now live), blackboard path safety documentation, ClawHub keywords

Tests

• 251 tests passing (139 adapter + 79 standalone + 33 security)
• Zero regressions

Full Changelog: v3.1.0...v3.1.2

---

This discussion was created from the release v3.1.2 — Security: Path Traversal Fix + ClawHub Live.