14 Commits

Author	SHA1	Message	Date
rcourtman	eb98c13896	Allow insecure dev HTTP agent runtime URLs	2026-04-23 13:48:54 +01:00
rcourtman	8a42bb432e	Harden commercial callback and transport URL policy	2026-04-22 10:57:21 +01:00
rcourtman	9c8387be6f	Export restricted outbound HTTP security helpers	2026-04-22 10:05:57 +01:00
rcourtman	70b91759d2	Harden secure local key file handling	2026-04-22 05:13:01 +01:00
rcourtman	ccb2edc3b8	Require explicit websocket origin continuity	2026-04-22 04:46:13 +01:00
rcourtman	d64f5b2917	Canonicalize loopback-only Pulse transport validation	2026-04-22 04:11:18 +01:00
rcourtman	43922161e4	Harden connection probe and simple stats rendering	2026-04-22 01:18:33 +01:00
rcourtman	513399b004	Harden hosted signup and audit webhook trust paths	2026-04-22 00:54:49 +01:00
rcourtman	f2746960d6	Relax mounted storage-root hardening semantics	2026-04-16 21:37:11 +01:00
rcourtman	9855973e5b	Fix non-root storage hardening for Helm startup	2026-04-16 21:26:02 +01:00
rcourtman	4564742c18	Harden outbound SSO fetch boundaries	2026-04-01 16:36:44 +01:00
rcourtman	f1fc17e627	Canonicalize fixed alerts and licensing paths	2026-03-29 14:14:36 +01:00
rcourtman	82b24f5d90	Harden AI storage leaf path handling	2026-03-29 13:35:32 +01:00
rcourtman	d6536932fc	Harden outbound URLs and file-backed storage	2026-03-29 12:47:55 +01:00