From da0df12bcbfec71bfe6ce825a451d638abd06e7c Mon Sep 17 00:00:00 2001
From: Andy Dixon <andy@andydixon.com>
Date: Thu, 1 Oct 2026 19:48:59 +0100
Subject: [PATCH] chore(ui): annotate the intention redirect for gosec

The target is a same-origin path built from a stored mind slug and a
parsed UUID.
---
 internal/ui/volition.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/ui/volition.go b/internal/ui/volition.go
index 9a55e75..b7747db 100644
--- a/internal/ui/volition.go
+++ b/internal/ui/volition.go
@@ -126,7 +126,7 @@ func (u *UI) intentionRedirect(w http.ResponseWriter, r *http.Request) {
 		u.errorPage(w, r, http.StatusNotFound, "No such mind.")
 		return
 	}
-	http.Redirect(w, r, "/minds/"+m.Slug+"/intentions/"+string(id), http.StatusSeeOther)
+	http.Redirect(w, r, "/minds/"+m.Slug+"/intentions/"+string(id), http.StatusSeeOther) // #nosec G710 -- same-origin path built from a stored slug and a parsed UUID
 }
 
 // dagLevel is one column of a plan's dependency graph.