lfg2025/archy
1
0
Fork 0
Code Issues 24 Pull Requests 4 Actions Packages Projects Releases 74 Wiki Activity
2,957 Commits 38 Branches 143 Tags
92a8dff6b19cf40df2a7d3ccb066ee1ecbb15e68
Commit Graph
6 Commits
Author SHA1 Message Date
archipelagoandClaude Fable 5 16642ad8b8 feat(security): declare port auth policy across the app manifests 
20 HTTP UIs move to bind: 127.0.0.1 + auth: gated (the daemon owns their
external addresses and authenticates every connection); 5 loopback-only
backends declare auth: local so the gate keeps its hands off. Protocol
ports (LND, bitcoin p2p, electrum, CLN, gitea SSH, Wyoming, mDNS/SSDP)
were already declared auth: none with rationales in earlier commits.

Inert until the catalog is re-signed: nodes act only on declared fields
delivered via the signed catalog, and the catalog overlay overrides these
disk manifests everywhere they are installed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-08-04 06:09:37 -04:00
archipelago 09ec64932f app-platform: generate catalog from app manifests 2026-06-11 00:24:20 -04:00
archipelago c0751e2551 chore(release): stage v1.7.54-alpha 2026-05-06 09:23:57 -04:00
archipelago 745cb1c626 chore(release): stage v1.7.52-alpha 2026-05-05 11:29:18 -04:00
DorianandClaude Opus 4.6 72cdd12f6b fix: harden all 23 app manifests with no_new_privileges, user, seccomp (MAINT-04) 
Added no_new_privileges: true, user: 1000, and seccomp_profile: default
to all app manifests. Created community app review checklist.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-11 18:13:28 +00:00
zazawowow 1ac70634bd mid code commit 2026-01-24 23:18:24 +00:00