Latte 782d416e46 fix: require a matching Origin on consent and name the binding cookie per flow (SEC-17, SEC-19)

2026-10-14 17:26:52 +02:00

..

adr

feat: add per-user OAuth mode proxying sign-in to Gitea

2026-10-14 16:41:18 +02:00

research

docs: phase 0 audit, chunk plan, ADRs and pinned Gitea 28.1.0 swagger

2026-10-14 15:34:48 +02:00

architecture.md

fix: write-ahead audit entry so calls stop when the audit log stops accepting writes (SEC-03)

2026-10-14 17:11:53 +02:00

audit-logging.md

fix: create the audit log 0600 in a 0700 directory and refuse symlinks (SEC-11)

2026-10-14 17:18:29 +02:00

audit.md

docs: phase 0 audit, chunk plan, ADRs and pinned Gitea 28.1.0 swagger

2026-10-14 15:34:48 +02:00

configuration.md

fix: add OAUTH_REDIRECT_ALLOWLIST for client registration and waive the open default (SEC-05)

2026-10-14 17:24:41 +02:00

deployment.md

fix: fail closed on an unwritable audit log, bound the rate limiter and harden startup

2026-10-14 16:24:51 +02:00

getting-started.md

fix: load ./.env only when private and owned, add --env-file and AEGIS_ENV_FILE (SEC-04)

2026-10-14 17:22:29 +02:00

hardening.md

fix: fail closed on an unwritable audit log, bound the rate limiter and harden startup

2026-10-14 16:24:51 +02:00

index.md

docs: rewrite README and docs for the full-access design, generate tool inventory

2026-10-14 16:13:11 +02:00

packaging.md

docs: rewrite README and docs for the full-access design, generate tool inventory

2026-10-14 16:13:11 +02:00

raw-api.md

docs: rewrite README and docs for the full-access design, generate tool inventory

2026-10-14 16:13:11 +02:00

roadmap.md

docs: rewrite README and docs for the full-access design, generate tool inventory

2026-10-14 16:13:11 +02:00

security-findings.md

docs: security threat model and review findings

2026-10-14 17:04:47 +02:00

security.md

fix: require a matching Origin on consent and name the binding cookie per flow (SEC-17, SEC-19)

2026-10-14 17:26:52 +02:00

tools.md

docs: regenerate tool inventory after annotation overrides

2026-10-14 16:13:57 +02:00

troubleshooting.md

fix: load ./.env only when private and owned, add --env-file and AEGIS_ENV_FILE (SEC-04)

2026-10-14 17:22:29 +02:00