weichenandCursor 4c34e8a503 fix(server): close security headers, lease clamp, replay digest, double start ...

Add nosniff, frame denial, referrer policy, and a self-origin CSP. Clamp human and squad lease TTLs and require author edit rights before a human lease. Include DryRun in replay digests so a dry-run approval cannot authorize apply. Stop Server.Start from swallowing a second Runtime.Start.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-19 09:12:17 +00:00

..

duty_lock_test.go

test: cover duty lock, heal/revoke skip, and instance duty adapter

2026-09-17 09:59:38 +00:00

engine_db_test.go

fix(docgov): map zero duty ids to NULL on CreateOrGetDocument

2026-09-17 06:08:35 +00:00

engine_test.go

fix(docgov): mark proposal applied after durable DB write

2026-09-13 10:09:18 +00:00

engine.go

fix(docgov): surface lease/audit persist failures and read back fencing token

2026-09-19 04:50:40 +00:00

lease_test.go

fix(server): close security headers, lease clamp, replay digest, double start

2026-09-19 09:12:17 +00:00

lease.go

fix(server): close security headers, lease clamp, replay digest, double start

2026-09-19 09:12:17 +00:00

null_if_zero_test.go

fix(docgov): map zero duty ids to NULL on CreateOrGetDocument

2026-09-17 06:08:35 +00:00

project_docs_content_test.go

fix(docgov): keep markdown hard-breaks and unify content hashes

2026-09-14 02:02:53 +00:00

project_docs_test.go

feat(docgov): project document summary returns authoritative duties

2026-09-13 17:02:23 +00:00

project_docs.go

feat(docgov): lock document duties and project duty_policy

2026-09-17 09:59:38 +00:00

repository.go

feat(events): apply version-committed projections only forward

2026-09-15 09:59:55 +00:00

state_machine_duty_policy_test.go

test: cover author_only access matrix and duty_policy audits

2026-09-17 13:15:05 +00:00

state_machine.go

feat(docgov): record duty_policy on lifecycle audit details

2026-09-17 13:15:05 +00:00

types.go

feat(docgov): lock document duties and project duty_policy

2026-09-17 09:59:38 +00:00