-
943be2353d
docs(06-10): complete exact InvScope denial bodies plan
Jakub Zych
2026-09-21 00:26:51 +02:00
-
c9909ce412
docs(06-09): update plan tracking
Jakub Zych
2026-09-20 21:08:54 +02:00
-
158df899f6
docs(06-09): complete transactional panic recovery plan
Jakub Zych
2026-09-20 21:06:51 +02:00
-
93d63c351b
fix(06-09): buffer route responses before recovery
Jakub Zych
2026-09-20 21:05:44 +02:00
-
f6ba67a693
test(06-09): add failing panic response regressions
Jakub Zych
2026-09-20 21:04:02 +02:00
-
8a265d8372
docs(06-08): update plan tracking
Jakub Zych
2026-09-20 21:00:45 +02:00
-
ac24ddd518
docs(06-08): complete transition-address SSRF closure plan
Jakub Zych
2026-09-20 20:58:54 +02:00
-
99fa932d43
fix(06-08): classify IPv6 transition addresses
Jakub Zych
2026-09-20 18:14:12 +02:00
-
1cd76fcd95
test(06-08): add failing transition address regressions
Jakub Zych
2026-09-20 17:15:57 +02:00
-
3601a0ab09
docs(06-07): update plan tracking
Jakub Zych
2026-09-20 17:11:59 +02:00
-
bc43e9eabd
docs(06-07): complete atomic limiter admission plan
Jakub Zych
2026-09-20 17:10:43 +02:00
-
6852a8f8c3
fix(06-07): make limiter admission atomic
Jakub Zych
2026-09-20 17:02:53 +02:00
-
5bcd7ba011
test(06-07): add failing atomic limiter regressions
Jakub Zych
2026-09-20 17:00:28 +02:00
-
47e9c44b2a
docs(06): create gap closure plans
Jakub Zych
2026-09-20 16:14:21 +02:00
-
c187d6f735
docs(06): reopen phase after verification gaps
Jakub Zych
2026-09-20 14:00:36 +02:00
-
dd78e0d6b3
docs(06): record gap-closure re-verification
Jakub Zych
2026-09-20 13:57:07 +02:00
-
067a3ffb2b
docs(06): add code review report
Jakub Zych
2026-09-20 13:49:19 +02:00
-
3c57a88344
chore(gsd): disable unsupported worktree isolation
Jakub Zych
2026-09-20 13:33:17 +02:00
-
f5fd55f419
docs(06-06): update plan tracking
Jakub Zych
2026-09-20 13:33:11 +02:00
-
7f627961b1
docs(06-06): complete personal-token rate-limit gap plan
Jakub Zych
2026-09-20 13:31:41 +02:00
-
3423da2222
docs(06-06): extend security review through gap closure
Jakub Zych
2026-09-20 13:30:41 +02:00
-
da8f247065
docs(06): finalize gap-closure plan
Jakub Zych
2026-09-20 00:19:53 +02:00
-
b20466d2e2
fix(06): revise gap plan security coverage and full gates
Jakub Zych
2026-09-20 00:14:58 +02:00
-
a61c83e614
fix(06): resolve research questions
Jakub Zych
2026-09-19 23:13:24 +02:00
-
2f90fef830
docs(06): add rate-limit middleware gap plan
Jakub Zych
2026-09-19 23:07:43 +02:00
-
cb34de4203
docs(phase-06): mark progress table as gaps found
Jakub Zych
2026-09-19 21:44:36 +02:00
-
59d9a26aad
docs(phase-06): record verification gaps and reopen phase
Jakub Zych
2026-09-19 21:44:26 +02:00
-
73218c0781
docs(06): add code review report
Jakub Zych
2026-09-19 21:32:41 +02:00
-
b759669f23
docs(06-05): complete unit coverage and security-review plan
Jakub Zych
2026-09-19 21:21:42 +02:00
-
74d1eb37a0
docs(06-05): map every T-06-xx threat to a passing test or restated accept
Jakub Zych
2026-09-19 21:15:24 +02:00
-
98dd09847a
test(06-05): close framework coverage gaps in bouncer, surf, wire, fetchguard
Jakub Zych
2026-09-19 21:08:04 +02:00
-
f61776d0a6
docs(06-03): complete raw groups, wire, CORS, and body-limit plan
Jakub Zych
2026-09-19 21:01:07 +02:00
-
30539b954f
feat(06-03): add path-scoped CORS and per-route body limits
Jakub Zych
2026-09-19 20:10:02 +02:00
-
9ecf2d1868
feat(06-03): add wire JSON helpers, Time, TriBool, and Slice
Jakub Zych
2026-09-19 20:01:27 +02:00
-
fa7e6d1870
feat(06-03): add raw groups, house middleware, and route:list
Jakub Zych
2026-09-19 19:55:32 +02:00
-
42b8295cc1
docs(06-02): complete fixed-window limiter and five-bucket plan
Jakub Zych
2026-09-19 19:46:28 +02:00
-
ab20ad0f9c
docs(06-02): correct HTTP-04 named bucket count to five
Jakub Zych
2026-09-19 19:42:23 +02:00
-
68c6ab85c5
feat(06-02): add fixed-window limiter, Store, and ClientIP
Jakub Zych
2026-09-19 19:35:53 +02:00
-
e2aba0ebf0
docs(phase-06): update tracking after wave 1
Jakub Zych
2026-09-19 19:28:18 +02:00
-
bc17c3decb
chore: merge executor worktree (worktree-agent-01a0ba96)
Jakub Zych
2026-09-19 19:26:53 +02:00
-
-
1f56a9ee1c
docs(06-01): complete guard registry and dual-group genres plan
Jakub Zych
2026-09-19 19:24:03 +02:00
-
cca4ec3a8b
docs(06-04): complete SSRF-guarded fetch helper plan
Jakub Zych
2026-09-19 19:03:20 +02:00
-
7923fe86c7
feat(06-04): implement dial-time SSRF-guarded Fetch
Jakub Zych
2026-09-19 19:02:12 +02:00
-
bae9de8788
test(06-04): add failing tests for SSRF-guarded Fetch
Jakub Zych
2026-09-19 19:00:01 +02:00
-
d376b1be2d
feat(06-01): grow router verbs, factories, and guard registry
Jakub Zych
2026-09-19 18:59:12 +02:00
-
d3630e7de0
feat(06-04): implement private/reserved IP classification table
Jakub Zych
2026-09-19 18:57:44 +02:00
-
f7e7ca7fa3
test(06-04): add failing test for private/reserved IP table
Jakub Zych
2026-09-19 18:57:18 +02:00
-
-
ecab09c37a
docs(06): finalize phase plan after verification
Jakub Zych
2026-09-19 17:16:58 +02:00
-
ad3d6f7f84
docs(06): revision pass 1 - resolve Limiter naming collision and add plugin-facing house-middleware capability
Jakub Zych
2026-09-19 17:13:02 +02:00
-
c4f406bb64
docs(06): create phase plan
Jakub Zych
2026-09-19 16:58:48 +02:00
-
6a9f5e1b47
docs(05): add code review fix report
Jakub Zych
2026-09-19 15:41:27 +02:00
-
56156ae7c3
fix(05): WR-05 gate public file serving on is_public
Jakub Zych
2026-09-19 15:37:04 +02:00
-
c12e6576f6
fix(05): WR-04 default File.IsPublic to true without trapping false
Jakub Zych
2026-09-19 15:34:50 +02:00
-
fb12b2237d
fix(05): WR-03 numeric between/min/max without omitempty or length tags
Jakub Zych
2026-09-19 15:33:16 +02:00
-
e54f9d7f10
fix(05): WR-02 delete thumb blob after a failed encode
Jakub Zych
2026-09-19 15:31:37 +02:00
-
c211822448
fix(05): WR-01 bound thumb dimensions and decoded image size
Jakub Zych
2026-09-19 15:30:58 +02:00
-
44126cc935
fix(05): CR-01 serve thumb URLs from the validated path key
Jakub Zych
2026-09-19 15:30:18 +02:00
-
c0b2b6db08
docs(phase-6): add validation strategy
Jakub Zych
2026-09-19 15:36:23 +02:00
-
e9c2f25ebe
docs(06): research HTTP routing, auth groups and rate limiting
Jakub Zych
2026-09-19 15:35:20 +02:00
-
07df9b1e74
docs(state): record phase 6 context session
Jakub Zych
2026-09-19 14:04:36 +02:00
-
820d17c6c3
docs(06): capture phase context
Jakub Zych
2026-09-19 14:04:36 +02:00
-
ab4ac856da
docs(05): add code review report
Jakub Zych
2026-09-19 00:20:17 +02:00
-
bbee45c5f4
docs(05): add code review fix report
Jakub Zych
2026-09-18 23:53:21 +02:00
-
c84869270e
test(05): WR-05 pin that the thumb delete prefix is ID-delimited
Jakub Zych
2026-09-18 23:48:49 +02:00
-
ced87a5608
fix(05): WR-04 restrict thumb mode and ext to [a-z0-9]+ before building blob keys
Jakub Zych
2026-09-18 23:48:22 +02:00
-
6d2262d95f
fix(05): WR-02 fill Encrypted columns from plaintext, never Scan request input
Jakub Zych
2026-09-18 23:47:28 +02:00
-
3943ea3a2e
fix(05): CR-01 accept pointer and whole JSON numbers in integer rule
Jakub Zych
2026-09-18 23:41:57 +02:00
-
ba8a822149
docs(phase-5): evolve PROJECT.md after phase completion
Jakub Zych
2026-09-18 21:11:43 +02:00
-
0056c35cb0
docs(phase-5): complete phase execution
Jakub Zych
2026-09-18 21:11:43 +02:00
-
cd546dae1d
docs(05): add code review report
Jakub Zych
2026-09-18 21:11:11 +02:00
-
38cd4c6f50
docs(05-06): record plan close-out in STATE and ROADMAP
Jakub Zych
2026-09-18 20:56:10 +02:00
-
ba3efccadd
docs(05-06): complete fill-fuzz hidden-marshal security-review plan
Jakub Zych
2026-09-18 20:54:10 +02:00
-
e0a11c3ea0
docs(05-06): security review of fill and encryption boundaries
Jakub Zych
2026-09-18 20:51:35 +02:00
-
1fcf5abcdf
test(05-06): assert HasHidden fields never marshal
Jakub Zych
2026-09-18 20:48:21 +02:00
-
7ead5e0c2f
test(05-06): add lagoon.Fill fuzz test
Jakub Zych
2026-09-18 20:45:52 +02:00
-
67434f5185
docs(05-05): record plan close-out in STATE and ROADMAP
Jakub Zych
2026-09-18 20:28:00 +02:00
-
62f3ae563f
docs(05-05): complete remaining-models schema-diff fixture plan
Jakub Zych
2026-09-18 20:26:41 +02:00
-
4df7e016a2
feat(05-05): accept boolean validation token
Jakub Zych
2026-09-18 20:14:46 +02:00
-
678b216900
docs(05-04): record plan close-out in STATE and ROADMAP
Jakub Zych
2026-09-18 20:05:58 +02:00
-
690aed2ea6
docs(05-04): complete attachments system_files blob and thumb plan
Jakub Zych
2026-09-18 20:04:39 +02:00
-
d8ecb41981
feat(05-04): add attach delete lifecycle and static file handler
Jakub Zych
2026-09-18 20:00:31 +02:00
-
ba9c99246e
feat(05-04): implement attach File, Thumb, blob bucket, system_files migration
Jakub Zych
2026-09-18 19:55:15 +02:00
-
2d84ae4565
test(05-04): add failing tests for attach File, Thumb, and bucket
Jakub Zych
2026-09-18 19:53:00 +02:00
-
b1b740c333
docs(05-03): record plan close-out in STATE and ROADMAP
Jakub Zych
2026-09-18 19:44:42 +02:00
-
76852e2d55
docs(05-03): complete secrets-slice encrypted credentials plan
Jakub Zych
2026-09-18 19:43:02 +02:00
-
8d9109a771
feat(05-03): implement lagoon.Encrypted, key:generate, Laravel decrypt helper
Jakub Zych
2026-09-18 19:35:24 +02:00
-
06bad37c24
test(05-03): add failing tests for Encrypted, key:generate, Laravel decrypt
Jakub Zych
2026-09-18 19:32:30 +02:00
-
a46c153480
docs(05-02): record plan close-out in STATE and ROADMAP
Jakub Zych
2026-09-18 19:25:21 +02:00
-
628cffd66f
docs(05-02): complete album-collection vertical slice plan
Jakub Zych
2026-09-18 19:23:51 +02:00
-
2c5d92d659
feat(05-02): add lagoon.Validate rule-string engine
Jakub Zych
2026-09-18 19:22:04 +02:00
-
20b0199579
feat(05-02): add lagoon.Jsonable TEXT cast
Jakub Zych
2026-09-18 19:12:33 +02:00
-
06635f21cd
docs(05-01): record plan close-out in STATE and ROADMAP
Jakub Zych
2026-09-18 18:53:33 +02:00
-
87006d12d9
docs(05-01): complete Winter layout and lagoon primitives plan
Jakub Zych
2026-09-18 18:49:59 +02:00
-
c85fa24936
docs(05-01): drop 27-migrations target and move HTTP fuzz to Phase 12
Jakub Zych
2026-09-18 18:48:08 +02:00
-
52638fb4e3
feat(05-01): add Paginate envelope and RegisterJoinTable
Jakub Zych
2026-09-18 18:47:42 +02:00
-
969a5f522a
feat(05-01): implement Fill, hook interfaces, and cascade helper
Jakub Zych
2026-09-18 18:46:37 +02:00
-
fec23e21c2
test(05-01): add failing tests for Fill and lifecycle cascade
Jakub Zych
2026-09-18 18:45:46 +02:00
-
a9c77fcf49
docs(05-01): confirm models-leaf rule against three more plugins
Jakub Zych
2026-09-18 18:37:26 +02:00
-
29b73b6892
docs(05): create phase plan
Jakub Zych
2026-09-18 18:06:55 +02:00
-
bbf49a910a
fix(05): revise plans based on checker feedback
Jakub Zych
2026-09-18 17:31:53 +02:00