6 Commits

Author	SHA1	Message	Date
KoalaDev	ce3cf0ef89	docs: add KNOWN_LIMITATIONS.md with threat model + NOFIX entries ... Records the accepted, out-of-threat-model decisions that reviewers/agents keep re-reporting as bugs: unauthenticated peerId (host impersonation), non-constant- time room-password compare, public server token, enumerable room IDs, and pause-revert-not-prevent. Spells out the threat model (ephemeral, account-less rooms of invited participants watching a video) so the "NOFIX" rationale is clear, and distinguishes these from genuinely-deferred items (EC-10 host grace, classifier tuning). Cross-referenced from SECURITY.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-28 02:53:11 +02:00
Koala	4f4cdcd8c0	Cache health responses server-side	2026-06-03 11:04:45 +02:00
Koala	602be3a724	Tighten health endpoint hardening	2026-06-03 10:59:08 +02:00
Koala	81c50eff16	Harden room discovery and health metrics	2026-06-03 10:48:49 +02:00
Koala	47ead27344	docs: improve CONTRIBUTING.md and SECURITY.md readability ... - CONTRIBUTING: add ways to contribute table, project structure, setup guide - CONTRIBUTING: add website testing, translation guide, bug report template - SECURITY: add scope/out-of-scope, architecture overview, threat model - SECURITY: structured reporting timeline, responsible disclosure policy	2026-06-01 03:21:59 +02:00
MacBook	cb466d3865	chore: bump version to 1.3.1 ... - update manifest.base.json, package.json and index.html to v1.3.1 - add SECURITY.md file	2026-05-02 02:07:22 +02:00