609 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
lilleman	3a3bd77bb8	Answer product-owner round 2: 0 🔴, 0 🟡 (0 misread); no findings	2026-11-08 14:42:22 +01:00
lilleman	4b44d5bfde	Answer stability round 2: 0 🔴, 0 🟡 (0 misread); no findings	2026-11-08 14:42:22 +01:00
lilleman	17cd516ace	Answer prose round 1: 1 🔴, 3 🟡 (0 misread); fixes in the previous commit	2026-11-08 14:41:19 +01:00
lilleman	6a58ce3e81	Answer product-owner round 1: 1 🔴, 0 🟡 (0 misread); fixes in the previous commit, scheduling README points at buildPaginationModel	2026-11-08 14:41:19 +01:00
lilleman	9af29ffdb9	Answer stability round 1: 1 🔴, 4 🟡 (0 misread); assetHref in the test fakes, one shared buildContext option set, default pinned, upgrade note and AGENTS.md corrected	2026-11-08 14:41:19 +01:00
lilleman	80070762e7	Answer security round 1: 0 🔴, 0 🟡 (0 misread); no findings	2026-11-08 14:32:43 +01:00
lilleman	404f2584ac	Add buildPaginationModel and ctx.assetHref, and bump the plugin contract to 0.5.0	2026-11-08 14:32:05 +01:00
lilleman	01f368d663	Record the comprehension check: PR #214 paired ruling better	2026-11-08 14:22:51 +01:00
lilleman	84368ea20b	Answer security round 1: 0 🔴, 0 🟡 (0 misread); no findings	2026-11-08 14:18:39 +01:00
lilleman	20b4d23855	Answer product-owner round 1: 0 🔴, 1 🟡 (0 misread); changelog entry and the fix in the warning	2026-11-08 14:18:39 +01:00
lilleman	28d6fc4774	Answer prose round 1: 0 🔴, 2 🟡 (0 misread); fixes in the previous commit	2026-11-08 14:18:39 +01:00
lilleman	4239ee12f0	Answer stability round 1: 0 🔴, 3 🟡 (0 misread); gate test pins each source, builtin-route name, exact CSS wording	2026-11-08 14:18:39 +01:00
lilleman	a2493edff2	Move test-only tooling to src/test-tooling, split positive, warn on undeclared gated permissions	2026-11-08 14:09:20 +01:00
lilleman	5aa62e2742	Record reading cost for item 51's chunk	2026-11-08 14:09:20 +01:00
renovate-bot	99d5928b1d	Update axllent/mailpit Docker tag to v1.33.1	2026-11-08 04:18:29 +00:00
renovate-bot	93825a2e4e	Update dependency lucide-static to v1.70.0 ... Release-Bump: minor v0.4.25	2026-11-07 04:18:40 +00:00
renovate-bot	43e66fce1f	Update dependency lucide-static to v1.69.0 ... Release-Bump: minor v0.4.24	2026-11-06 04:18:40 +00:00
renovate-bot	48bedf07b1	Update dependency lucide-static to v1.68.0 ... Release-Bump: minor v0.4.23	2026-11-05 04:19:15 +00:00
lilleman	0a6905a58b	Cite bender-infra's renumbered Requests dashboard, item 117	2026-11-04 19:30:20 +01:00
lilleman	adfa665c7c	File the caller's IP, user agent and host on every request span	2026-11-04 12:20:47 +01:00
renovate-bot	254b512020	Update dependency lucide-static to v1.67.0 ... Release-Bump: minor v0.4.22	2026-11-04 04:18:37 +00:00
lilleman	529dd5cfa1	Mark 0.4.21 and 0.4.22 renamed to 0.5.0	2026-11-03 21:55:15 +01:00
lilleman	95a9f28a5f	Answer stability round 2: 0 🔴, 0 🟡 (0 misread); the order-free stylesheet comparison holds	2026-11-03 21:50:47 +01:00
lilleman	29fac748f9	Compare the repeat view's stylesheets in any order, since WebKit finishes cache hits in no set order	2026-11-03 21:50:13 +01:00
lilleman	7100740eb5	Answer stability round 1: 0 🔴, 1 🟡 (0 misread); the same reserved-ids fix	2026-11-03 21:46:57 +01:00
lilleman	0cd5d368da	Answer product-owner round 1: 0 🔴, 1 🟡 (0 misread); the README's reserved ids list error, fixed in the prose round's commit	2026-11-03 21:46:57 +01:00
lilleman	a3b8632d5c	Answer prose round 1: 0 🔴, 1 🟡 (0 misread); the secrets checklist reads in one pass, and four comments shrink or say granted	2026-11-03 21:46:57 +01:00
lilleman	69f0371b89	Answer security round 1: 0 🔴, 0 🟡 (0 misread); /security-review found nothing	2026-11-03 21:46:57 +01:00
lilleman	190d12532d	Record the reading cost	2026-11-03 21:44:05 +01:00
lilleman	fefc7cee30	Plan 0.5.0 from the ten highest-scoring items; reserve the plugin id error, translate the duplicate-group refusal, and correct four comments and README passages	2026-11-03 21:43:57 +01:00
renovate-bot	0ebccfd1b6	Update dependency @mdn/browser-compat-data to v8.1.8	2026-11-03 04:19:00 +00:00
renovate-bot	d1fb444e51	Update renovate/renovate Docker tag to v44.199.2	2026-11-02 04:19:45 +00:00
renovate-bot	171f37985d	Update dependency lucide-static to v1.66.0 ... Release-Bump: minor v0.4.21	2026-11-01 04:19:23 +00:00
lilleman	c2389f871d	Record the comprehension check: overall 6.50 then 6.38, under the 7.0 floor; the README's REQUIRE_SECURE_SECRETS drift is filed as item 56	2026-10-31 14:09:54 +01:00
lilleman	8e73d165da	Answer prose round 1: 0 🔴, 5 🟡 (0 misread); the comments move to the guard, the changelog says variable	2026-10-31 13:56:46 +01:00
lilleman	04545274f3	Answer product-owner round 1: 0 🔴, 0 🟡 (0 misread); approved	2026-10-31 13:56:46 +01:00
lilleman	8ffbb0b70d	Answer stability round 1: 0 🔴, 4 🟡 (0 misread); the driver decides what parses so a multi-host DSN still works, and the nine-key test shrinks to four	2026-10-31 13:56:46 +01:00
lilleman	b8686377c9	Answer security round 1: 0 🔴, 0 🟡 (0 misread); /security-review found nothing, and the full scan didn't fire: the change removes a leak and opens no boundary	2026-10-31 13:49:38 +01:00
lilleman	217a36252e	Keep a URL config value out of the boot error that rejects it	2026-10-31 13:48:43 +01:00
lilleman	03bcf216a7	Answer security round 1: 0 🔴, 0 🟡 (0 misread); /security-review found nothing, the full scan's cost prompt had no user to answer it	2026-10-31 13:43:04 +01:00
lilleman	306f322b62	Answer product-owner round 1: 0 🔴, 0 🟡 (0 misread); the README says a mistyped value names the plugin and the variable	2026-10-31 13:43:04 +01:00
lilleman	396ce93a2f	Answer prose round 1: 0 🔴, 0 🟡 (0 misread); the redundant comment goes, the changelog entry shrinks to one sentence	2026-10-31 13:43:04 +01:00
lilleman	5be561c4ba	Answer stability round 1: 0 🔴, 3 🟡 (0 misread); the tests quote each non-secret value and run one case per type, the config.ts URL leak is filed as item 55	2026-10-31 13:43:04 +01:00
lilleman	8f7bc59b38	Keep a secret setting's raw value out of the boot error that rejects it	2026-10-31 13:38:27 +01:00
lilleman	622059101f	Record the comprehension check: PR #200 ruled same, scored 6.50 and 6.25; filed items 46-54	2026-10-31 13:31:41 +01:00
lilleman	3592a30f98	Answer prose round 1: 0 🔴, 2 🟡 (0 misread); the view header calls the link a URL, the always-present code loses its guard, the test comment goes	2026-10-31 13:11:21 +01:00
lilleman	f340933e39	Answer product-owner round 1: 0 🔴, 1 🟡 (0 misread); the notice tells the admin to send the link and the code	2026-10-31 13:11:21 +01:00
lilleman	00fe8b0dd2	Answer stability round 1: 0 🔴, 2 🟡 (0 misread); the admin recovery journey gets an E2E, the Kratos comments no longer claim a mailed link	2026-10-31 13:11:21 +01:00
lilleman	767c76b16c	Answer security round 1: 0 🔴, 0 🟡 (0 misread); /security-review found nothing, the link comes from Kratos' admin response behind users:write	2026-10-31 13:05:32 +01:00
lilleman	4cb21d8909	Link the admin's recovery-code notice to the flow the code was minted on	2026-10-31 13:05:06 +01:00