← Branches
step2/seal-and-secrets
Commits
-
d826fc4
Say what the CSP sweep actually covers, measured rather than reasoned
Paul Campbell
-
6b1c02c
Measure the sweep's reach instead of reasoning about it
Paul Campbell
-
4d6f923
Answer the final review: the sweep now reaches the routes it claimed to
Paul Campbell
-
013331d
Close the stub's timeout gap, and test the wiring the stub cannot
Paul Campbell
-
3634208
Answer the confirmation review: three claims that outlived what they described
Paul Campbell
-
099582e
The script sweep reports the right reason for a single-quoted src
Paul Campbell
-
d39fc86
Answer the third review: four gates that did not guard what they claimed
Paul Campbell
-
f945e66
Test the callback's browser binding instead of asserting it in a comment
Paul Campbell
-
311b95a
Ruling A gets a second opinion, and it corrected this plan
Paul Campbell
-
bd3e7d7
Draft the §13 step 3 plan: assertions, the redirect protocol, gate 3
Paul Campbell
-
903eb7b
Enrolling a passkey needs a fresh session, or a stolen cookie is a permanent lockout
Paul Campbell
-
3211100
Cite the edge's X-Forwarded-For contract instead of paraphrasing it
Paul Campbell
-
05376b0
Pin the fact that RequireFresh is not the same as a real assertion
Paul Campbell
-
bd98ac0
AGENTS.md: gates 1 and 2 have their database now
Paul Campbell
-
0ba212f
Scriptless sign-in screens, and the guard that the RP ID is a full host
Paul Campbell
-
c07d9de
Answer the second review: two gates that could not fail, three claims that were false
Paul Campbell
-
3328173
Passkeys as an optional second factor, gated on both sign-in paths
Paul Campbell
-
494db92
Sign-in through signin.Flow, with the link redeemed on POST
Paul Campbell
-
e41d43c
Answer the Task 1 review, and land the sealed link store
Paul Campbell
-
9209153
Open the database, and prove secure_delete reaches every connection
Paul Campbell
-
bbe7604
The person ref: opaque, minted, never derived from an address
Paul Campbell
-
65bafa8
The schema with no address column, and the guard that says so
Paul Campbell
-
53430d0
Seal values at rest, load the four secrets, and the plaintext gate that proves it
Paul Campbell
amadan