Jakub Zych 4730e37742 docs(19.7-05): security review and contract, deferred items, folded todos closed ...

- 19.7-SECURITY-REVIEW.md: T-19.7-01..41 and T-19.7-SC with file, line and
  pinning test; two production fixes (c49983d, 1111828); superuser reach
  accepted as designed with audit and ceiling
- 19.7-SECURITY.md: threats_open 0, accepted risks AR-19.7-01..05
- the frontend permission and account link todos move to todos/done with
  their closing notes

2026-10-23 14:29:56 +02:00

..

2026-10-17-frontend-backend-account-link.md

docs(19.7-05): security review and contract, deferred items, folded todos closed

2026-10-23 14:29:56 +02:00

2026-10-17-plugin-registered-frontend-permissions.md

docs(19.7-05): security review and contract, deferred items, folded todos closed

2026-10-23 14:29:56 +02:00

2026-10-20-branded-error-pages-for-browsers.md

docs(quick-261020-42e): branded HTML error pages for browsers

2026-10-20 03:17:09 +02:00

2026-10-22-user-login-ignores-is-activated.md

docs: user-plugin escalations released in sm-user-plugin v0.1.9, reply ready to send

2026-10-23 00:25:24 +02:00

2026-10-22-user-login-lockout-and-same-second-cutoff.md

docs: user-plugin escalations released in sm-user-plugin v0.1.9, reply ready to send

2026-10-23 00:25:24 +02:00

2026-10-22-user-login-opt-in-session-cookie.md

docs: user-plugin escalations released in sm-user-plugin v0.1.9, reply ready to send

2026-10-23 00:25:24 +02:00

2026-10-22-user-logout-blacklist-missing-under-serve.md

docs: user-plugin escalations released in sm-user-plugin v0.1.9, reply ready to send

2026-10-23 00:25:24 +02:00

2026-10-22-user-password-routes-404-switch.md

docs: user-plugin escalations released in sm-user-plugin v0.1.9, reply ready to send

2026-10-23 00:25:24 +02:00

2026-10-22-user-session-routes-ignore-cookie.md

docs: user-plugin escalations released in sm-user-plugin v0.1.9, reply ready to send

2026-10-23 00:25:24 +02:00

backend-admin-api-tokens.md

docs: sync todos with g15office and map phases to milestone tasks

2026-10-11 02:01:50 +02:00

bonfire-duplicate-command-names.md

docs(19.8): close the duplicate command names todo

2026-10-21 12:13:29 +02:00

cabana-plugin-registered-field-types.md

docs: sync todos with g15office and map phases to milestone tasks

2026-10-11 02:01:50 +02:00

cabana-richeditor-field-type.md

docs: sync todos with g15office and map phases to milestone tasks

2026-10-11 02:01:50 +02:00

email-proof-release.md

docs(19.5): record the email-proof release and close its todo

2026-10-21 15:33:05 +02:00

fetchguard-guarded-http-client.md

docs(14-06): Phase 14 validation signed off, requirements complete, API coverage confirmed, folded todos closed

2026-10-04 02:47:53 +02:00

journal-author-profile-fields.md

docs(todos): close journal-author-profile-fields; reload-on-deploy progress from Phase 19.4.1

2026-10-20 19:28:17 +02:00

journal-imported-html-admin-resave.md

docs: sync todos with g15office and map phases to milestone tasks

2026-10-11 02:01:50 +02:00

lagoon-validate-min-message.md

docs(12-01): reword the Phase 12-14 scope and requirements

2026-10-02 11:44:52 +02:00

nest-framework-packages-under-modules.md

docs: sync todos with g15office and map phases to milestone tasks

2026-10-11 02:01:50 +02:00

per-module-readmes-after-nest.md

docs: sync todos with g15office and map phases to milestone tasks

2026-10-11 02:01:50 +02:00

redacting-slog-handler.md

docs(14-06): Phase 14 validation signed off, requirements complete, API coverage confirmed, folded todos closed

2026-10-04 02:47:53 +02:00

rewrite-summercms-readme.md

docs: sync todos with g15office and map phases to milestone tasks

2026-10-11 02:01:50 +02:00

user-plugin-commands-open-database.md

docs(19.5): close user-plugin console database todo

2026-10-20 23:07:22 +02:00

verify-models-leaf-rule.md

docs(05-01): confirm models-leaf rule against three more plugins

2026-09-18 18:37:26 +02:00

wristband-neutral-resource-default.md

docs(19.4): close neutral wristband resource todo

2026-10-19 18:32:10 +02:00