3 Commits

Include renames

Author	SHA1	Message	Date
weichen	8cdc839650	test(docs): Phase 1 IAM authz tests and test report ... Extend P0 and auth/me handler tests for members endpoint and capabilities; archive Phase 1 test report under .doc/test-reports/.	2026-09-13 02:50:22 +00:00
weichen	d4988d04e8	test(docs): extend Phase 0 security gates and archive test report ... Add P0 negative tests, prod bundle forbidden-string scan, and the Phase 0 security止血 acceptance report with PASS results.	2026-09-13 02:50:22 +00:00
weichen	3145550a59	feat(security): complete P0 release blocking remediation ... Unify auth middleware and remove X-User-ID trust, add project_members authorization, sandbox workspaces via resolver, and admin-only reconcile by run_id. Introduce goose migrations with startup schema gate, fail closed when DB unavailable outside explicit ALLOW_IN_MEMORY, bundle web/dist in app Dockerfile, and remove frontend pseudo-login fallback.	2026-09-13 02:50:22 +00:00