2 Commits

Author	SHA1	Message	Date
PTah	80320ae698	fix: harden SAC security per audit (0.4.15) ... Close audit findings: anti-spoof client IP for login rate limit, JWT/CORS enforce on startup, SSH host-key verification and sudo via stdin, optional WinRM HTTPS, SSE httpOnly cookie auth, ingest body limit, ILIKE escaping, and HMAC API key hashing with legacy SHA-256 fallback.	2026-07-07 19:32:12 +10:00
PTah	69a232d08a	feat: backend ingest API, Docker Compose, Ubuntu install guide ... - FastAPI: POST /api/v1/events, GET /health, JSON Schema validation - PostgreSQL models, Alembic migration, bootstrap API key - deploy/docker-compose.yml, .env.example - docs/install-ubuntu-24.04.md, updated work-plan (agents first)	2026-05-26 20:21:31 +10:00