Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Fimeg e8afcc7994 feat: machine-bound token renewal + refresh-token rotation with reuse detection ... Bind /renew to the registered machine so a stolen refresh token can't mint tokens from another host. Rotate the refresh token on every renewal; replaying a consumed token whose successor is also consumed revokes the family. Accept- previous-once grace covers agent crash-before-save. Typed auth errors so the polling loop renews on 401 and treats refresh/machine failures as terminal.		2026-05-29 10:47:48 -04:00
..
cmd/server	feat: signed release manifest + fail-closed binary distribution	2026-05-29 10:47:41 -04:00
internal	feat: machine-bound token renewal + refresh-token rotation with reuse detection	2026-05-29 10:47:48 -04:00
.env.example	refactor: rename aggregator-agent to agent for public release	2026-05-21 13:19:18 -04:00
docker-entrypoint.sh	refactor: rename aggregator-agent to agent for public release	2026-05-21 13:19:18 -04:00
Dockerfile	refactor(agent): scanner orchestrator cleanup + kernel-enforcement wiring + hash-registry follow-ups	2026-05-28 13:31:51 -04:00
go.mod	refactor(agent): scanner orchestrator cleanup + kernel-enforcement wiring + hash-registry follow-ups	2026-05-28 13:31:51 -04:00
go.sum	refactor(agent): scanner orchestrator cleanup + kernel-enforcement wiring + hash-registry follow-ups	2026-05-28 13:31:51 -04:00