Commit Graph

  • fef037efe8 fix(08-10): close real defects found by check-phase8.sh's first end-to-end run Jakub Zych 2026-09-24 00:51:17 +02:00
  • 0c173df25c docs(08-10): add the Phase 8 security review; mark Wave 0 green Jakub Zych 2026-09-24 00:12:36 +02:00
  • 034f63907d feat(08-10): fail-closed 08-SECURITY-REVIEW.md checks in check-phase8.sh Jakub Zych 2026-09-24 00:12:28 +02:00
  • eb40d1bdc4 docs(08-10): add the 103-method PHP-to-Go OAuth test map Jakub Zych 2026-09-24 00:05:58 +02:00
  • f4259560c2 test(08-10): close wristband 103-method PHP audit gaps Jakub Zych 2026-09-24 00:05:41 +02:00
  • d358bbf907 docs(08-09): complete parity-and-real-mcp-gate plan Jakub Zych 2026-09-23 23:22:53 +02:00
  • e87346f9e3 feat(08-09): complete the fail-closed Phase 8 final unchanged-MCP gate Jakub Zych 2026-09-23 23:18:15 +02:00
  • 6cc07a42e2 fix(08-09): match wristband OAuth byte contract to live-recorded PHP Jakub Zych 2026-09-23 23:12:02 +02:00
  • 246a488412 test(08-09): add check-phase8.sh gate skeleton with RED self-test Jakub Zych 2026-09-23 22:44:20 +02:00
  • f13f76ed4b docs(08-08): complete mcp-me-prerequisite plan Jakub Zych 2026-09-23 22:23:40 +02:00
  • 27845490e8 docs(08-07): complete oauth-client-command plan Jakub Zych 2026-09-23 22:05:44 +02:00
  • 398353b135 feat(08-07): wire repeatable bonfire flags and export client-issuing helpers Jakub Zych 2026-09-23 21:56:00 +02:00
  • 7096a90235 test(08-07): add failing repeatable-flag RED anchor for bonfire Jakub Zych 2026-09-23 21:54:44 +02:00
  • d70e412138 docs(08-06): complete lifecycle and sweeps plan Jakub Zych 2026-09-23 21:42:32 +02:00
  • dab2b8f31a feat(08-06): implement refresh rotation, replay lineage-kill, and token sweep Jakub Zych 2026-09-23 21:26:35 +02:00
  • b2c2cc0bb7 test(08-06): add failing refresh-lifecycle RED anchor and store interface Jakub Zych 2026-09-23 21:26:05 +02:00
  • da01ea105c docs(08-05): record fetchguard flake resolution in deferred items Jakub Zych 2026-09-23 21:15:43 +02:00
  • 64f9009d3d test(fetchguard): widen streaming-cap ceiling to stop flake under parallel runs Jakub Zych 2026-09-23 21:15:43 +02:00
  • 7f37311120 docs(08-05): complete consent plan Jakub Zych 2026-09-23 21:11:45 +02:00
  • fac9648ac9 feat(08-05): add read-only UI-contract harness for consent and connected apps Jakub Zych 2026-09-23 21:04:34 +02:00
  • a1fa9c6f44 feat(08-05): add wristband consent issue/deny operations Jakub Zych 2026-09-23 20:59:24 +02:00
  • a459f74897 docs(08-04): complete token-exchange plan Jakub Zych 2026-09-23 20:35:49 +02:00
  • 4bd3b3db4f feat(08-04): implement atomic PKCE-bound code exchange in wristband Jakub Zych 2026-09-23 20:28:07 +02:00
  • 5ca830beef test(08-04): add failing code-exchange RED test in wristband Jakub Zych 2026-09-23 20:25:16 +02:00
  • 5dc8c35e06 docs(08-03): record parity test fix and fetchguard flake in deferred items Jakub Zych 2026-09-23 20:16:21 +02:00
  • 33ab188a2e docs(08-03): complete authorize plan Jakub Zych 2026-09-23 20:11:54 +02:00
  • 90752beb87 feat(08-03): implement exact authorize validation and pending creation in wristband Jakub Zych 2026-09-23 20:08:37 +02:00
  • 787e612ab3 test(08-03): add failing authorize RED test in wristband Jakub Zych 2026-09-23 20:01:18 +02:00
  • ae326b0941 docs(08-02): complete persistence and registration plan Jakub Zych 2026-09-23 19:54:54 +02:00
  • c0b1e3cfae feat(08-02): implement exact RFC 7591 registration in wristband Jakub Zych 2026-09-23 19:37:54 +02:00
  • c026b83f41 test(08-02): add failing RFC 7591 registration RED test in wristband Jakub Zych 2026-09-23 19:37:03 +02:00
  • deee2cc8d7 docs(08-01): complete metadata RED infrastructure plan Jakub Zych 2026-09-23 19:20:35 +02:00
  • c578bb58d7 feat(08-01): implement exact RFC 8414 metadata writer in wristband Jakub Zych 2026-09-23 19:10:26 +02:00
  • 24d35d85e8 test(08-01): add failing RFC 8414 metadata RED test and fail-closed verifier Jakub Zych 2026-09-23 19:09:14 +02:00
  • a59e69211d docs(08): finalize oauth plans after final checker pass Jakub Zych 2026-09-23 18:42:49 +02:00
  • 2d7ac66605 docs(phase-07): add security threat verification Jakub Zych 2026-09-23 18:19:43 +02:00
  • e23cbac240 fix(08): revise oauth plans after checker feedback Jakub Zych 2026-09-23 17:46:38 +02:00
  • 3c6a505c5f fix(08): revise plans based on checker feedback Jakub Zych 2026-09-23 17:13:47 +02:00
  • 241af16ba7 docs(08): create OAuth authorization server plans Jakub Zych 2026-09-23 13:38:58 +02:00
  • 716d0ea40d docs(08): approve UI design contract Jakub Zych 2026-09-23 12:53:09 +02:00
  • dd96f59e57 docs(8): revise UI design contract Jakub Zych 2026-09-23 12:50:25 +02:00
  • 2aafa6f2a2 docs(08): add UI design contract Jakub Zych 2026-09-23 12:44:34 +02:00
  • 37fbcdc6de docs(phase-08): add validation strategy and resolve research decisions Jakub Zych 2026-09-23 12:32:31 +02:00
  • a3a4636c29 docs(08): research OAuth authorization server Jakub Zych 2026-09-23 12:14:03 +02:00
  • 47b856b1c6 docs(state): record phase 8 context session Jakub Zych 2026-09-23 11:37:14 +02:00
  • 251ac038e2 docs(08): capture phase context Jakub Zych 2026-09-23 11:37:13 +02:00
  • b435304570 docs(phase-7): complete phase execution Jakub Zych 2026-09-23 10:53:42 +02:00
  • e537b67a37 docs(07): verify phase after the avatar bucket gap close Jakub Zych 2026-09-23 10:52:45 +02:00
  • 3a15105a1b docs(state): record 07-08 completion and tracking Jakub Zych 2026-09-23 10:51:26 +02:00
  • b74484eabc docs(07-08): complete the avatar bucket publish plan Jakub Zych 2026-09-23 10:50:01 +02:00
  • 44900f0d16 feat(07-08): publish the uploads bucket on serve Jakub Zych 2026-09-23 10:43:47 +02:00
  • 33f716ddef docs(07-08): plan avatar bucket publish on serve and Handler Jakub Zych 2026-09-23 10:33:19 +02:00
  • ab84becf16 test(07): complete UAT - 11 passed, 1 issues Jakub Zych 2026-09-23 10:33:16 +02:00
  • 1bd9f9e056 docs(state): record phase 9 context session Jakub Zych 2026-09-23 10:24:37 +02:00
  • 8268ff780d docs(09): capture phase context Jakub Zych 2026-09-23 10:24:22 +02:00
  • d20f99f2e6 docs(07-07): complete the user-api parity gap plan Jakub Zych 2026-09-23 00:01:18 +02:00
  • 31634f706f feat(07-07): localize lagoon validation with Laravel-shaped Polish messages Jakub Zych 2026-09-22 23:56:58 +02:00
  • dd3cb7ac29 docs(07): record gap-closure planning in state Jakub Zych 2026-09-22 20:41:30 +02:00
  • 8a1a52915b fix(07): revise 07-07-PLAN.md for checker-found seeding blockers Jakub Zych 2026-09-22 20:38:01 +02:00
  • f75e3e84db docs(07): plan gap closure for the pending user-api parity routes Jakub Zych 2026-09-22 20:22:45 +02:00
  • d4e9c17816 docs(07): record the phase goal verification Jakub Zych 2026-09-22 19:27:27 +02:00
  • 9446981ffd docs(07-06): complete the unit coverage plan Jakub Zych 2026-09-22 19:21:31 +02:00
  • 4754377442 feat(07-06): prove mint, refresh, and blacklist under concurrency Jakub Zych 2026-09-22 19:20:14 +02:00
  • fa7bdb5f71 docs(07-05): complete the user API parity capture plan Jakub Zych 2026-09-22 18:44:05 +02:00
  • 7d5d8659ec feat(07-05): allow the second parity test password Jakub Zych 2026-09-22 18:43:27 +02:00
  • ecfcd23150 docs(07-04): complete the personal token and locale plan Jakub Zych 2026-09-22 18:09:31 +02:00
  • 4e56ff98b0 docs(07-03): complete the account management plan Jakub Zych 2026-09-22 16:48:10 +02:00
  • 3cf938867c docs(07-02): complete the user session plan Jakub Zych 2026-09-22 15:15:16 +02:00
  • ae9e11f65d docs(07-01): complete framework auth primitives plan Jakub Zych 2026-09-22 13:43:15 +02:00
  • 8fcaff77cf feat(07-01): add bcrypt, locale override, and validation rules Jakub Zych 2026-09-22 13:39:25 +02:00
  • bccd7f8f35 test(07-01): add failing tests for passwords, locale, and validation Jakub Zych 2026-09-22 13:36:08 +02:00
  • cad445a235 feat(07-01): add JWT mint, refresh, and blacklist primitives Jakub Zych 2026-09-22 13:34:58 +02:00
  • 251f3cc4a0 test(07-01): add failing tests for JWT lifecycle primitives Jakub Zych 2026-09-22 13:33:37 +02:00
  • 80eaeb87ea docs(07): mark phase planned, annotate roadmap waves Jakub Zych 2026-09-22 12:39:05 +02:00
  • 3aed5c88c3 docs(07): revise plans after checker review Jakub Zych 2026-09-22 12:37:08 +02:00
  • 57745e32a2 docs(07): create phase plan Jakub Zych 2026-09-22 12:21:15 +02:00
  • 0c41151863 docs(07): add pattern map Jakub Zych 2026-09-22 11:51:06 +02:00
  • fb16132d21 docs(07): add validation strategy Jakub Zych 2026-09-22 02:43:29 +02:00
  • 0ef3a47d22 docs(07): research user plugin and authentication phase Jakub Zych 2026-09-22 02:42:14 +02:00
  • 5548b2fab4 docs(state): record phase 7 context session Jakub Zych 2026-09-22 00:24:22 +02:00
  • 1979c45083 docs(07): capture phase context Jakub Zych 2026-09-22 00:24:21 +02:00
  • 2fe5c1e920 docs(06): verify phase 6 passed, mark HTTP-04/06 complete Jakub Zych 2026-09-21 19:51:58 +02:00
  • fb66398cb9 docs(06-14): complete gap-closure test and review plan Jakub Zych 2026-09-21 19:49:47 +02:00
  • ae817ccbb9 docs(06-14): reopen and re-close phase 6 security review with T-06-28..35 Jakub Zych 2026-09-21 19:49:30 +02:00
  • e50e2dd632 test(06-14): fetchguard IANA boundary and zoned dial tests, surf edge coverage Jakub Zych 2026-09-21 19:48:06 +02:00
  • f1218f2c84 test(06-14): regression coverage for surf and bouncer gap closure Jakub Zych 2026-09-21 19:47:16 +02:00
  • 1d2e00cf59 fix(06-14): actually reuse built middleware factories per name:param Jakub Zych 2026-09-21 19:47:16 +02:00
  • 54dd60953a docs(06-13): complete fetchguard SSRF gap-closure plan Jakub Zych 2026-09-21 19:45:03 +02:00
  • b1079ab8a4 fix(06-13): full IANA special-use SSRF tables and reject zoned dial targets Jakub Zych 2026-09-21 19:44:51 +02:00
  • 4bad1a43a2 docs(06-12): complete surf/bouncer gap-closure plan Jakub Zych 2026-09-21 19:43:51 +02:00
  • 8a9449df63 fix(06-12): reject typed-nil guards and fractional JWT subjects Jakub Zych 2026-09-21 19:43:35 +02:00
  • 4ad2ad29f2 fix(06-12): fail closed on invalid limiter definitions Jakub Zych 2026-09-21 19:42:41 +02:00
  • a50e09ba34 fix(06-12): bound named middleware by body cap, cache factories, fail boot on bad body config and mux conflicts Jakub Zych 2026-09-21 19:42:20 +02:00
  • 46c7e4f98e docs(06): create gap-closure plans 12-14 Jakub Zych 2026-09-21 19:30:50 +02:00
  • 6e9188b5c7 docs(06): record verification gaps Jakub Zych 2026-09-21 14:49:52 +02:00
  • c5b412c7e1 docs(06): add code review report Jakub Zych 2026-09-21 14:31:47 +02:00
  • ef6d914e4c docs(06-11): update plan tracking Jakub Zych 2026-09-21 13:05:11 +02:00
  • 2329e1f290 docs(06-11): complete post-gap security review plan Jakub Zych 2026-09-21 13:03:41 +02:00
  • 829e9989e3 docs(06-11): refresh Phase 6 security review Jakub Zych 2026-09-21 13:02:41 +02:00
  • 7118e4f280 docs(06-10): update plan tracking Jakub Zych 2026-09-21 00:28:15 +02:00