security: review summary (redacted) + safe P0/P1 hardening - #77

Merged

alain-sv merged 10 commits into

claude/sparc-security-review-imcyu6

Jul 7, 2026

Commits on Jul 7, 2026

docs: add redacted security & performance review summary

claude
authored and
alain-sv
committed
480dee2
fix(security): harden API-key compare, local-mode bind, headers, logging, scheduler

claude
authored and
alain-sv
committed
c32edcb
fix(security): compare API keys as bytes to avoid TypeError on non-ASCII

claude
authored and
alain-sv
committed
9ddff60
refactor(security): address review feedback on hardening changes

claude
authored and
alain-sv
committed
0d0c9fd
refactor(security): tighten scheduled-step allow-list resolution

claude
authored and
alain-sv
committed
d5b571d
fix(security): use SAMEORIGIN and hoist Jobs import

claude
authored and
alain-sv
committed
a14dd61
refactor(admin): hoist scheduled step helper import
alain-sv
committed
202e7bc
fix(security): scope scheduled step ownership checks
alain-sv
committed
18fb77a
✨ docs: add test summary table to changelog (docs/CHANGELOG.md)
alain-sv
committed
14e1663
✨ feat(ci): skip unit tests for docs-only changes in workflow
alain-sv
committed
55e2202