krz/gitbay

Architecture review small fixes: FK check, web toggles, doc drift !496

merged merged by cmc on 2026-09-28 22:09 UTC · krz/gitbay:web-audit-fixes into main

Discussion

cmc

Small fixes from the architecture review.

  • A -- foreign_keys: off migration runs foreign_key_check inside its own transaction, before commit, so a violation rolls the migration back; the error names the table and rowid.
  • The web pin and watch buttons dispatch through repo pin/unpin and repo watch/mute/unwatch, so refusals reach the viewer and the writes are audited. The watch button cycles default, watching, muted.
  • The login-link response sends Cache-Control: no-store.
  • API, Parity and Threat-Model wiki pages corrected; CHANGELOG.

Stacked on !492 (cli-ux-fixes).

Closes #261