Juan DenisandClaude Fable 5 b2fad9528a docs: clarify agent.key + session-token notes; record audit remediation (L2/L4-L7) ...

- SECURITY.md: spell out that agent.key encryption is off-host/tamper
  protection, not confidentiality against local root; 0600 perms are the real
  control (L2).
- agent_registry.py: reword the per-message session-token "TODO" to an accepted
  limitation (defence-in-depth, not a bug) (L7).
- AGENT_AUDIT.md: record H1/H2/H3 and L1-L7 status, with L4 (cap OR-merge),
  L5 (single-worker), L6 (windows .bat) noted as accepted by-design/documented.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-06-12 18:35:52 -04:00

..

app

docs: clarify agent.key + session-token notes; record audit remediation (L2/L4-L7)

2026-06-12 18:35:52 -04:00

migrations

feat(workspaces): per-resource access grants — per-site ACL backend (#33)

2026-06-01 11:59:34 -04:00

templates

Surface Docker DBs, add base port & migration fixes

2026-06-06 23:29:22 -04:00

tests

fix(pairing): require developer role for claim/lookup (audit L1)

2026-06-12 18:35:43 -04:00

.bandit

Add dev launcher; harden backups & storage

2026-03-02 22:48:29 -05:00

.dockerignore

Compose: containerize backend & build frontend

2026-03-01 14:30:21 -05:00

.env.example

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

.gitignore

Add dev launcher; harden backups & storage

2026-03-02 22:48:29 -05:00

cli.py

Add deployment jobs and remote deployment runner

2026-04-29 00:39:16 -04:00

config.py

fix(backend): auto-allow SERVERKIT_PUBLIC_URL in CORS; bump Flask-SocketIO

2026-05-31 19:44:47 -04:00

Dockerfile

Add audit fallback, builtin extensions, and ports

2026-05-03 15:57:02 -04:00

requirements.txt

feat(ai): add core AI assistant primitive powered by Prompture

2026-06-01 02:39:05 -04:00

run.py

Add unified dev scripts and improve login UX

2026-01-25 18:33:25 -05:00

wp-cli.phar

Add multi-site WordPress management and UI overhaul

2026-01-28 22:15:57 -05:00