pulse-triage[bot] f6bd20136f Align ordinary config redirect controls with origin confinement ...

The broad suite retained the old cross-endpoint positive oracle. Keep same-origin proxy reads, require cross-origin refusal before a second request, and retain every stricter guest-lock refusal and same-target recovery assertion.

Contract-Neutral: Update a verification oracle for the already implemented infrastructure origin contract; no runtime change or relaxation of guest-command safety.
Change-source: pulse-maintainer

2026-10-11 06:43:55 +01:00

..

agents

Preserve partial PVE filesystem readings without widening helper access

2026-10-05 18:22:01 +01:00

aicontracts

Preserve canonical Patrol planning and outcome continuity

2026-09-07 17:24:25 +01:00

audit

Preserve audit evidence in verification and recovery guidance

2026-10-01 20:08:53 +01:00

auth

fix(auth): synchronise local admin permissions during setup

2026-09-10 06:52:38 +01:00

cloudauth

fix(hosted): preserve direct handoff membership continuity

2026-03-26 23:40:02 +00:00

db

fix(ai): preserve diagnostic evidence and proposal boundaries

2026-09-06 01:54:28 +01:00

discovery

Bound discovery probe response bodies

2026-09-01 10:37:26 +01:00

diskinventory

Stop a stale agent SMART row lending a replaced disk its identity (#2658)

2026-10-07 14:01:19 +01:00

edition

Block in-app self-update on the Pro binary to prevent silent downgrade

2026-07-08 10:02:04 +01:00

extensions

Fix audit storage migration and viewer races

2026-07-24 10:33:57 +01:00

fsfilters

Avoid per-directory allocations while filtering disk mounts

2026-10-09 17:50:19 +01:00

licensing

Retire Relay labels and upsells inside Pulse

2026-09-29 13:19:54 +01:00

metrics

Remove the summary chart routes no client calls

2026-10-07 23:14:49 +01:00

netutil

Keep guest primary addresses associated with their interfaces

2026-10-09 13:07:08 +01:00

pbs

Expose infrastructure credentials following redirects to another origin

2026-10-11 06:34:28 +01:00

pmg

Honour saved PMG collection scope without inventing recovery

2026-10-08 06:54:46 +01:00

proxmox

Align ordinary config redirect controls with origin confinement

2026-10-11 06:43:55 +01:00

pulsecli

Enforce server-owned action approval authority

2026-07-11 19:49:17 +01:00

reporting

Let only POST narrate single-resource reports with Pulse Assistant

2026-10-07 21:00:34 +01:00

securityutil

Block IPv6 transition addresses in SSRF guards (GHSA-8f8r-p75h-jwq5)

2026-07-31 17:57:26 +01:00

server

Preserve telemetry sender transitions and bound-socket health

2026-10-01 13:28:21 +01:00

tlsutil

Keep infrastructure credentials inside their configured HTTP origin

2026-10-11 06:37:38 +01:00