2 Commits

Include renames

Author	SHA1	Message	Date
weichenandCursor	b65e8fb642	docs(db): mark baseline and seed migrations as checksum-immutable ... Goose checksums forbid rewriting applied files. Document that 00001-00009 have no down migration and that 00012's unconditional DELETE is demo-only. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-19 07:49:01 +00:00
weichen	3145550a59	feat(security): complete P0 release blocking remediation ... Unify auth middleware and remove X-User-ID trust, add project_members authorization, sandbox workspaces via resolver, and admin-only reconcile by run_id. Introduce goose migrations with startup schema gate, fail closed when DB unavailable outside explicit ALLOW_IN_MEMORY, bundle web/dist in app Dockerfile, and remove frontend pseudo-login fallback.	2026-09-13 02:50:22 +00:00