 arkonandClaude Opus 4.8
|
a8e0e2a343
|
chore: release 0.9.0 — security hardening + warn-don't-block network policy
Release 0.9.0 covering the merged security/reliability PRs (#106 deps/
supply-chain, #107 auth/network, #108 test stability, #110 tmux cwd) plus:
- Network policy: a non-loopback bind without CODEMAN_PASSWORD now STARTS
with a loud warning (3 ways to secure) instead of refusing to start.
Loopback stays the safe default. --allow-unauthenticated-network just
acknowledges (terser note). (src/web/server.ts start())
- Post-install security note explaining the loopback default + safe exposure.
- New docs/security-architecture.md documenting the full model (binding,
auth pipeline, tunnel req.ip caveat, file-serving, supply-chain, isolation,
recommended setups). CLAUDE.md Security section + gotcha updated.
- Updated auth-security test: asserts warn-and-start (not throw).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
2026-06-08 19:29:47 +02:00 |
|