rookiestar28
|
bdf1a0a9ad
|
style: apply supply-chain checker formatting
|
2026-05-13 10:45:02 +08:00 |
|
rookiestar28
|
bba8055c3f
|
security: harden supply-chain CI gates
|
2026-05-13 10:17:57 +08:00 |
|
rookiestar28
|
59fce18c4d
|
refactor(audit): add retained-chain verifier
|
2026-04-16 16:06:03 +08:00 |
|
rookiestar28
|
2cc3edf959
|
fix(security): remove residual audit hash and log sinks
|
2026-04-08 03:11:42 +08:00 |
|
rookiestar28
|
43a44495a1
|
fix(security): remove audit identifier persistence
|
2026-04-08 02:53:35 +08:00 |
|
rookiestar28
|
f70b197ef4
|
style: apply codeql workflow autofixes
|
2026-04-08 02:44:10 +08:00 |
|
rookiestar28
|
4a84b9858d
|
ci(security): add codeql workflow baseline
|
2026-04-08 02:43:09 +08:00 |
|
rookiestar28
|
0f133ec6e0
|
style: apply pre-push black autofixes
|
2026-04-08 02:24:48 +08:00 |
|
rookiestar28
|
2da760de02
|
fix(security): remove residual token hash indexing
|
2026-04-08 02:22:17 +08:00 |
|
rookiestar28
|
d6f26d38ce
|
fix(security): harden audit identifier redaction
|
2026-04-08 02:13:44 +08:00 |
|
rookiestar28
|
b8470e73cc
|
style: apply black autofixes
|
2026-04-08 01:36:18 +08:00 |
|
rookiestar28
|
af9c9a4c2d
|
fix(security): harden connector ingress failures
|
2026-04-08 01:12:56 +08:00 |
|
rookiestar28
|
01f9828f99
|
fix(security): strengthen sensitive hash derivation
|
2026-04-08 01:06:41 +08:00 |
|
rookiestar28
|
d429c11018
|
fix(security): redact sensitive bridge and audit identifiers
|
2026-04-08 01:02:39 +08:00 |
|
rookiestar28
|
153f158a6a
|
fix(security): harden workflow token permissions
|
2026-04-08 00:41:03 +08:00 |
|
rookiestar28
|
e5e4af3657
|
refactor: centralize legacy compatibility governance
|
2026-03-19 19:11:58 +08:00 |
|
rookiestar28
|
c4dd5f5276
|
test: harden access-control mutation hotspots
|
2026-03-08 16:18:26 +08:00 |
|
rookiestar28
|
807a78e76f
|
R137/S71: single-emit audit wrappers and fail-closed connector allowlists
|
2026-03-01 16:31:20 +08:00 |
|
rookiestar28
|
df03ecb173
|
fix(r135): make audit hash-chain writes atomic with lock
|
2026-03-01 01:35:59 +08:00 |
|
rookiestar28
|
67f9dc317a
|
security: finalize R99/S47 closeout with deny-path audit coverage, sandbox FS guards, and full SOP validation
|
2026-02-17 20:03:34 +08:00 |
|
rookiestar28
|
ace9e63af5
|
feat(security): deliver S46 WP3 RBAC baseline with regression tests and legacy auth-contract safeguards
|
2026-02-17 18:54:32 +08:00 |
|
rookiestar28
|
0632361e6a
|
feat(security): complete S45 startup exposure hard-stop and sync roadmap/implementation evidence
|
2026-02-17 18:17:50 +08:00 |
|
rookiestar28
|
d20a4f7818
|
feat(security): complete endpoint inventory drift guard, align roadmap progress, and document latest hardening updates
|
2026-02-17 17:05:13 +08:00 |
|