Security improvements - #19

Merged

goshatch merged 26 commits into

mainfrom

security-fixes

Jul 26, 2026

Commits on Jul 26, 2026

security: key rate limiter on proxy-set X-Real-IP
goshatch
committed
48a00a8
security: need password to change email/password
goshatch
committed
8572c34
security: scrub audit snapshots on erasure
goshatch
committed
b077266
security: parameterize interval SQL, ban raw
goshatch
committed
dafa82a
security: bound batch, body and text sizes
goshatch
committed
f1b74d2
security: per-user rate limit on write routes
goshatch
committed
5d4f521
security: drop CREATEROLE, guard cleartext DB
goshatch
committed
6099dd3
security: pin CI actions, replace dead cache
goshatch
committed
b9b4f93
security: nREPL on 0600 unix socket in prod
goshatch
committed
b48d9c9
test: assert PDF as-of content, not byte size
goshatch
committed
058b90a
security: isolate backup creds in own user
goshatch
committed
067ccaf
security: erasure purge assumes deletion_role
goshatch
committed
21126f6
security: DB session store, log out everywhere
goshatch
committed
28e42f4
security: low-severity hardening sweep
goshatch
committed
e412089
security: export projects via allowlist
goshatch
committed
495cc0e
security: infra hardening sweep
goshatch
committed
be84787
security: app hardening sweep round 2
goshatch
committed
697f514
security: CSP on public pages, no inline JS
goshatch
committed
82db7a9
security: existing-box catch-up on re-provision
goshatch
committed
2a29d44
security: per-instance nREPL socket path
goshatch
committed
212ae06
ci: run migrations without dev deps
goshatch
committed
a200f58
security: deletion_role grant must not inherit
goshatch
committed
8a40045
docs: INHERIT FALSE note in erasure runbook
goshatch
committed
929fb2d
ops: alert on unit failure, fix backup upload
goshatch
committed
40568a7
docs: verify append-only via policy, not probe
goshatch
committed
5e82b21
ops: fix unit quoting in failure notifier
goshatch
committed
363c210

Navigation Menu

Uh oh!

Security improvements - #19

Security improvements#19
goshatch merged 26 commits into
mainfrom
security-fixes

Commits on Jul 26, 2026

security: key rate limiter on proxy-set X-Real-IP

security: need password to change email/password

security: scrub audit snapshots on erasure

security: parameterize interval SQL, ban raw

security: bound batch, body and text sizes

security: per-user rate limit on write routes

security: drop CREATEROLE, guard cleartext DB

security: pin CI actions, replace dead cache

security: nREPL on 0600 unix socket in prod

test: assert PDF as-of content, not byte size

security: isolate backup creds in own user

security: erasure purge assumes deletion_role

security: DB session store, log out everywhere

security: low-severity hardening sweep

security: export projects via allowlist

security: infra hardening sweep

security: app hardening sweep round 2

security: CSP on public pages, no inline JS

security: existing-box catch-up on re-provision

security: per-instance nREPL socket path

ci: run migrations without dev deps

security: deletion_role grant must not inherit

docs: INHERIT FALSE note in erasure runbook

ops: alert on unit failure, fix backup upload

docs: verify append-only via policy, not probe

ops: fix unit quoting in failure notifier