Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Fimeg cc19854941 security: latch /admin group behind RequireAdmin (SEC-026) ... The /admin group rode on webAuthMW + audit only; just the securitySettings sibling checked the role. Inert today (login mints role=admin), live the day RBAC lands — one group-level gate beats per-route annotations to forget.		2026-06-15 09:07:19 -04:00
..
cmd/server	security: latch /admin group behind RequireAdmin (SEC-026)	2026-06-15 09:07:19 -04:00
internal	crypto: forward-only key-path ceiling + OSV resilience + token serialization	2026-06-14 12:57:04 -04:00
.env.example	refactor: rename aggregator-agent to agent for public release	2026-05-21 13:19:18 -04:00
docker-entrypoint.sh	refactor: rename aggregator-agent to agent for public release	2026-05-21 13:19:18 -04:00
Dockerfile	supply-chain: honest self-attestation posture (dep-scan, build provenance, install guard)	2026-06-14 12:56:42 -04:00
go.mod	supply-chain: gate our own deps, ship the verdict signed	2026-06-14 11:43:23 -04:00
go.sum	supply-chain: gate our own deps, ship the verdict signed	2026-06-14 11:43:23 -04:00