Peter Steinberger a509254b16 feat(security): warn on inert mutable allowFrom entries (#131129) ...

* feat(security): warn on inert mutable allowFrom entries

Report configured entries that cannot authorize with name matching disabled,
and preview lockout counts before disabling mutable matching. Distinguish
mutable aliases from exact identifiers with unproven ownership in audit text.

Reuse channel ingress declarations through one SDK classifier without changing
admission policy. Keep Discord audit findings redacted and exclude symbolic
access-group references from mutable-identifier warnings.

Refs #131099.

* test(security): keep entry-authentication audit coverage in its lanes

2026-08-27 12:33:12 -07:00

..

audit-checks.md

feat(security): warn on inert mutable allowFrom entries (#131129)

2026-08-27 12:33:12 -07:00

dependency-locking.md

build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks (#114006)

2026-07-26 01:29:55 -04:00

exposure-runbook.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

index.md

docs(start): correct headless credential handoff to the SQLite auth store (#131024)

2026-08-27 09:40:27 -07:00

rate-limiting.md

fix(gateway): restore external Tailscale Serve and Funnel proxies (#125412)

2026-08-17 16:01:35 -07:00

secure-file-operations.md

refactor(fs): adopt fs-safe 0.5 core primitives (#113705)

2026-07-28 03:41:47 -04:00