fix homoglyph trojan-source false positives: containsHomoglyph now only flags a Cyrillic look-alike when it's adjacent to an ASCII identifier char (a mixed-script *identifier* like pаssword) — a lone Cyrillic letter in prose/comments (koh's own detector documenting the attack) no longer trips it. add regression test. bump v1.39.28

dev · 15 weeks ago · 2026-06-06 · 13.5 MB

session: homoglyph false positives · agent: claude-opus-4-8

$ koh steal kepr.uk/kepr@c679e880b433
·
← e63b7bcd8971 ba5f4aa3586e →
⇓ download .face