cgalo5758 b245bdb0a9 Fix security audit findings from 2026-09-21 scan ...

Remediate six confirmed security issues: deployment-only config keys,
bounded provider responses, short-lived registration sessions, private
init file mode, FedWiki workflow authorization, and switch preview
gates.

- Add DeploymentOnly config key declaration; refuse runtime overrides
  for keys that decide where secrets are sent
- Create httplimit package; bound all provider response reads at 8 MiB
- Set fifteen-minute deadline on /register sessions
- Write mc-config.yaml with 0600 permissions
- Derive FedWiki workflow IDs from site IDs; re-authorize sites before
  mutating activities
- Apply switch authorization gates to the proration preview

2026-09-21 13:57:57 -05:00

..

queries

Add entitlement set rule change ledger and preview flow

2026-09-15 03:53:28 -05:00

config_overrides_db_test.go

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

config_overrides.sql.go

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

contract.go

Add entitlement set rule change ledger and preview flow

2026-09-15 03:53:28 -05:00

db.go

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

key_test.go

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

key.go

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

models.go

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

outbox.go

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

outbox.sql.go

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

provider_operations.sql.go

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

provider_states.sql.go

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

providers.sql.go

Add entitlement set rule change ledger and preview flow

2026-09-15 03:53:28 -05:00

querier.go

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

registration_db_test.go

Move issue tracking to the forge tracker

2026-09-21 02:35:27 -05:00

registration_test.go

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

registration.go

Add entitlement set rule change ledger and preview flow

2026-09-15 03:53:28 -05:00

settings_db_test.go

Add dual licensing and SPDX headers

2026-09-06 02:29:42 -05:00

settings.go

Fix security audit findings from 2026-09-21 scan

2026-09-21 13:57:57 -05:00

sqlc.yaml

Add operator-managed integration settings

2026-07-22 22:17:58 -05:00