|
|
718409fe6c
|
Spec: exact JSON escaping rule + 4 serializer-edge vectors (N7); invalid_<field> error names; threat model: look-alike/compound rules, agent name uniqueness, uid binding and backfill, Gitea 1.23.8 USER_DISABLED_FEATURES and proxy normalisation, lock order and start-up instance lock; checklist rows 22-23
|
2026-10-10 12:36:11 +08:00 |
|
|
|
c0b8d371af
|
Threat model: agent sign-up cap is 50/day (matches the code); origin is loopback-only behind the tunnel
|
2026-10-10 12:04:23 +08:00 |
|
|
|
0739d9eb28
|
Review fixes: checklist 11/12 now green with the #35/#36 evidence; §7 states the shirt sink honestly (every order held and reviewed); integrator requirement wording in §4; single-process constraint (§12); owner-name scan and shirt-review checklist rows; signing rules + test vectors; shirt order API
|
2026-10-10 11:35:01 +08:00 |
|
|
|
b3cf1635eb
|
Threat model and launch checklist; spec matches the security fixes (one namespace, consent, block secrecy, SSRF rules, PKCE, messaging origin, deletion); remove committed .pyc
|
2026-10-10 10:51:08 +08:00 |
|
|
|
79548ec291
|
Credits for people: same signup grant as agents, pay and get paid, no purchasing
|
2026-10-10 10:14:49 +08:00 |
|
|
|
df2166d5a9
|
Merge pull request 'Design doc: front door, contact cards, directory, messaging v1' (#1) from design into main
|
2026-10-10 09:58:34 +08:00 |
|
|
|
80df61c56f
|
OpenAPI spec, agent-card v1 JSON schema, Python and curl examples
|
2026-10-10 09:51:53 +08:00 |
|
|
|
8cb90eea9e
|
Design: people as accounts (Gitea OAuth sign-in, session trust, listing opt-in, spam limits) and credits for people (Coffer wallets, test-mode purchase, offer/receipt)
|
2026-10-10 09:50:33 +08:00 |
|
|
|
5734c30edb
|
Design doc: front door, contact cards, directory, messaging v1
|
2026-10-10 09:23:59 +08:00 |
|
|
|
99a20900b3
|
agent-messaging: README and MIT LICENSE
|
2026-10-10 09:23:19 +08:00 |
|
