Repository navigation

Fix/high findings - #222

Merged

SauravYadav12 merged 27 commits into

mainfrom

fix/high-findings

Nov 10, 2026

Merged

Fix/high findings#222
SauravYadav12 merged 27 commits into
mainfrom
fix/high-findings

Commits on Nov 10, 2026
- fix(security): keep accounts off the engine's container names (GW-2)
  
  SauravYadav12
  and
  claude
  committed
  752a51d
- fix(gateway): cap what a client can make us allocate before auth (PERF-3)
  
  SauravYadav12
  and
  claude
  committed
  62cf649
- fix(security): check the release signature in fox setup too
  
  SauravYadav12
  and
  claude
  committed
  2e789c8
- feat(install): find the distro image in its own checksum listing
  
  SauravYadav12
  and
  claude
  committed
  cc6e724
- fix(security): never sign checksums read back from a release
  
  SauravYadav12
  and
  claude
  committed
  e8e152e
- fix(security): a pipeline's claim ends with its branch (API-2)
  
  SauravYadav12
  and
  claude
  committed
  86f8b5c
- fix(security): check pipeline targets where the name comes in (GW-2)
  
  SauravYadav12
  and
  claude
  committed
  c993325
- perf(branch): one short inspect per branch, remembered for two seconds
  
  SauravYadav12
  and
  claude
  committed
  a8903c2
- perf(gateway): recover from a stale backend address
  
  SauravYadav12
  and
  claude
  committed
  5753c07
- fix(promote): refuse a request whose statements leave its transaction
  
  SauravYadav12
  and
  claude
  committed
  303867d
- fix(security): keep the Blackbox's chain head in a row taken under the lock
  
  SauravYadav12
  and
  claude
  committed
  4ca6d3c
- fix(perf): verify the security log's checkpoint from its last anchor
  
  SauravYadav12
  and
  claude
  committed
  f452613
- fix(perf): throttle and coalesce the Gateway's refusals per address
  
  SauravYadav12
  and
  claude
  committed
  f76b2b7
- fix(promote): apply a request as db_client over pgx, in one transaction
  
  SauravYadav12
  and
  claude
  committed
  eaaae5e
- perf(console): serve status, branches and replication from one snapshot
  
  SauravYadav12
  and
  claude
  committed
  94ff1e3
- perf(web): poll after the last poll, every 10s, only when visible
  
  SauravYadav12
  and
  claude
  committed
  68e4f1d
- fix(security): put timeouts on the connection that records a refusal
  
  SauravYadav12
  and
  claude
  committed
  8eba7bc
- fix(perf): read the audit log and its evidence a day at a time
  
  SauravYadav12
  and
  claude
  committed
  d2eaa03
- style: gofmt the evidence test
  
  SauravYadav12
  and
  claude
  committed
  a30afb0
- fix(perf): advance a quiet realtime slot from the server's position
  
  SauravYadav12
  and
  claude
  committed
  b38f2fb
- fix(security): take EXECUTE on the Blackbox's helpers away from clients
  
  SauravYadav12
  and
  claude
  committed
  6a6cf4a
- fix(security): refuse a replaced Blackbox trigger
  
  SauravYadav12
  and
  claude
  committed
  a7f45c2
- Merge worktree-agent-ab5ab26bf7fd3db24
  SauravYadav12
  committed
  b0ef926
- Merge worktree-agent-a74ba681a6c1ca3a4
  SauravYadav12
  committed
  c75c313
- Merge worktree-agent-a6ff3de8d8fb27d36
  SauravYadav12
  committed
  7d9e8a5
- Merge worktree-agent-a46f55431ad1199d8
  SauravYadav12
  committed
  efbca8b
- Merge worktree-agent-a33af7ec723e37863
  SauravYadav12
  committed
  7ed1149

Commits

Commits on Nov 10, 2026