Commits

• audit: refused pushes, journal copy, admin audit verify

  cmc · 2026-09-28 21:34 UTC

  success Verified · cmc 0666c9f622

• control: audit refused mutating commands, rate-limited per actor

  cmc · 2026-09-28 21:21 UTC

  Verified · cmc 607ba55d8f

• store: hash-chained audit rows, journal copy, chain verification

  cmc · 2026-09-28 09:12 UTC

  Verified · cmc 5a1b72b671

• sshd: mint a push token per receive-pack; hook sends it

  cmc · 2026-09-28 09:07 UTC

  success Verified · cmc 5c2215b845

• hookd: 0600 socket, peer uid check, push token required

  cmc · 2026-09-28 09:02 UTC

  Verified · cmc 135af80d08

• store: push tokens for receive-pack

  cmc · 2026-09-28 08:57 UTC

  Verified · cmc c40a116572

• mirror: ignore operator gitconfig, require git 2.37; import SSRF gap documented

  cmc · 2026-09-28 08:52 UTC

  success Verified · cmc 298ac0b456

• mirror: check the address before each sync and pin git to it

  cmc · 2026-09-28 08:45 UTC

  Verified · cmc 869d5659fb

• webhook: refuse shared (100.64.0.0/10) and multicast addresses

  cmc · 2026-09-28 08:45 UTC

  Verified · cmc 0babae2db0

• webhook: CheckAddrs for callers that resolve before connecting

  cmc · 2026-09-28 08:37 UTC

  Verified · cmc 7673081613

• mail: require TLS to a non-local relay; implicit TLS option

  cmc · 2026-09-28 08:33 UTC

  success Verified · cmc 01856d444d

• config: mail.require_tls and mail.tls

  cmc · 2026-09-28 08:29 UTC

  Verified · cmc 90622795ab

• https: TLS 1.2 minimum, set explicitly

  cmc · 2026-09-28 08:25 UTC

  success Verified · cmc 928b919242

• web: login over SSH applies the login-link limit

  cmc · 2026-09-28 07:57 UTC

  success Verified · cmc 6f553fea02

• changelog: the unreleased lead names the session idle timeout

  cmc · 2026-09-28 08:19 UTC

  success Verified · cmc 08a7e44095

• web: sessions list shows last use; docs for the idle timeout

  cmc · 2026-09-28 07:51 UTC

  Verified · cmc 0ff41e58be

• store: web sessions lapse after 12 hours idle, under the absolute cap

  cmc · 2026-09-28 07:46 UTC

  Verified · cmc a6f7827f2e

• token: create refuses a zero or negative --ttl

  cmc · 2026-09-28 08:17 UTC

  success Verified · cmc 253e1a2c23

• sshd: an expired key counts against the auth limiter

  cmc · 2026-09-28 08:17 UTC

  Verified · cmc a8ba660761

• control: key lists fit 60 columns; headers clip with their column

  cmc · 2026-09-28 08:17 UTC

  Verified · cmc 32a5f76e5b

• control: token list uses expiresText, not relAge, for expiry

  cmc · 2026-09-28 07:42 UTC

  Verified · cmc 2ddf2389c0

• control: keys add refuses --ttl 0h and negative

  cmc · 2026-09-28 07:41 UTC

  Verified · cmc 03040d2164

• wiki: key expiry

  cmc · 2026-09-28 07:40 UTC

  Verified · cmc 1ed9fb9399

• keys: --ttl on keys add and repo deploy-key add; lists show last use and expiry

  cmc · 2026-09-28 07:35 UTC

  Verified · cmc 44e5fb3a83

• sshd: refuse expired keys at auth and per exec; expiring keys cannot mint

  cmc · 2026-09-28 07:29 UTC

  Verified · cmc 7f5c45d0af

• store: ssh_keys.expires_at; expired keys are not live

  cmc · 2026-09-28 07:24 UTC

  Verified · cmc cab50f5004

• wiki: delegation bound covers tokens and keys, not web sessions

  cmc · 2026-09-28 08:10 UTC

  success Verified · cmc e2a32d5f8d

• wiki: token delegation, read default; release note

  cmc · 2026-09-28 07:17 UTC

  success Verified · cmc 0787c7c07e

• e2e: expiring tokens refused on minting; revoke --created

  cmc · 2026-09-28 07:12 UTC

  Verified · cmc ed682bb8e7

• token: default --scope read; record the creating token; revoke --created

  cmc · 2026-09-28 07:08 UTC

  Verified · cmc dd36248950

• control: expiring credentials cannot run credential-minting commands

  cmc · 2026-09-28 06:55 UTC

  Verified · cmc 89dd0a3eba

• store: tokens and keys record the token that created them; chained revoke

  cmc · 2026-09-28 06:49 UTC

  Verified · cmc 4b94fa96a1

• wiki: revocation closes open connections

  cmc · 2026-09-28 06:44 UTC

  success Verified · cmc 4bbf4f8114

• e2e: removing a key cuts its multiplexed connection and a push in flight

  cmc · 2026-09-28 06:41 UTC

  Verified · cmc 2b840816c9

• sshd: re-read the key per exec; revocation cuts its connections

  cmc · 2026-09-28 06:36 UTC

  Verified · cmc c0969481b0

• gitutil: Transport takes a cancel channel and kills its process group

  cmc · 2026-09-28 06:29 UTC

  Verified · cmc bf64c30c08

• store: announce key revocations; LiveSSHKeys

  cmc · 2026-09-28 06:25 UTC

  Verified · cmc 9f77ab1b00

• plans: apply decisions on the open questions

  cmc · 2026-09-28 06:12 UTC

  success Verified · cmc b711b70da5

• plans: open issues from the architecture and UX reviews

  cmc · 2026-09-28 05:23 UTC

  success Verified · cmc 4e0958a163

• wiki: Architecture overview names diagrams; titles drop their numbers; gaps filed

  cmc · 2026-09-28 04:31 UTC

  success Verified · cmc fc5b1b67a2

• wiki: architecture and security pages

  cmc · 2026-09-28 03:46 UTC

  success Verified · cmc 7a6343d02d

• wiki: pages in subfolders

  cmc · 2026-09-28 03:56 UTC

  success Verified · cmc 84c6f81258

• wiki: Parity reflects iOS MR labels and repository rename

  cmc · 2026-09-28 03:19 UTC

  success Verified · cmc 5c310a0e31

• deps: github.com/ProtonMail/go-crypto v1.5.1

  cmc · 2026-09-24 15:27 UTC

  success Verified · cmc 2c0846063b

• control: termSafe drops carriage returns

  cmc · 2026-09-24 14:47 UTC

  success Verified · cmc 5ed0f4f4cc

• control: gofmt the generated summaries; drop unused helpers

  cmc · 2026-09-24 04:33 UTC

  Verified · cmc dd23d1750e

• view: every sub-table under a section label

  cmc · 2026-09-24 04:32 UTC

  Verified · cmc 4b7a42dfb4

• control: control bytes in user text never reach the terminal

  cmc · 2026-09-24 04:31 UTC

  Verified · cmc 037e004e54

• control: --term only first, never over HTTP

  cmc · 2026-09-24 04:30 UTC

  Verified · cmc f513f70f9a

• gitbay: GITBAY_TERM=off sends no terminal size

  cmc · 2026-09-24 04:29 UTC

  Verified · cmc 1712c81b0a

older →