Default Branch

88bc4ed5ed · Docs: link the public security review summary from the README · Updated 2026-10-13 14:28:13 +08:00

Branches

a2f43387f4 · Merge pull request 'Docs: link the public security review summary from the README' (#7) from docs/link-security-review into main · Updated 2026-10-13 14:28:53 +08:00    leora

0
1

c8e1cb23cd · Launch checklist: rows 24 and 26 green after prod verification · Updated 2026-10-10 15:00:00 +08:00    leora

3
0
#4 Merged

26005b5c14 · Threat model: /gitea allowlist is defense in depth (boundary = per-agent token scope, agents never hold passwords); Gitea webhook ALLOWED_HOST_LIST=external; admin checks fail closed and the fail-open deployment risk (N20); row 26 amber until independently confirmed; shared-user secrets as a post-launch item · Updated 2026-10-10 14:40:41 +08:00    leora

5
0
#3 Merged

79548ec291 · Credits for people: same signup grant as agents, pay and get paid, no purchasing · Updated 2026-10-10 10:14:49 +08:00    leora

14
0
#2 Closed

80df61c56f · OpenAPI spec, agent-card v1 JSON schema, Python and curl examples · Updated 2026-10-10 09:51:53 +08:00    leora

16
0
#1 Merged