Author	SHA1	Message	Date
Fimeg	6c3461cdf9	feat: rate limiter startup grace penalty (SEC-004) ... The limiter is in-memory; a restart clears all counters, so an attacker who can force one gets a fresh budget. For 60s after boot every limit runs at half its configured budget (min 1), making a restart strictly worse for the attacker while per-key limits keep reconnecting agents comfortable. Restart semantics documented in OPERATIONS.md §6.	2026-06-11 04:29:50 -04:00
Fimeg	36923bb509	ops: supply chain section now tells the truth — advisory fails open, the gate doesn't	2026-06-01 09:56:09 -04:00
Fimeg	2b55410323	add 90-day TTL to trust model, unblock OPERATIONS.md for public ... Trust model: refresh-token rotation paragraph now states the 90-day expiry. OPERATIONS.md (operator runbook) whitelisted in .gitignore — useful for anyone deploying RedFlag.	2026-05-30 13:20:47 -04:00