weichen 3145550a59 feat(security): complete P0 release blocking remediation ...

Unify auth middleware and remove X-User-ID trust, add project_members
authorization, sandbox workspaces via resolver, and admin-only reconcile
by run_id. Introduce goose migrations with startup schema gate, fail closed
when DB unavailable outside explicit ALLOW_IN_MEMORY, bundle web/dist in
app Dockerfile, and remove frontend pseudo-login fallback.

2026-09-13 02:50:22 +00:00

..

authorizer.go

feat(security): complete P0 release blocking remediation

2026-09-13 02:50:22 +00:00