3 people 81bd5e722b fix(guard): https enforcement is nginx's layer + calibrate the prose validators (#599) ...

The 2026-07-19 outage root cause: enforce_https keyed off
environment==production, but nginx is the single entry point — the app
only ever sees proxy-HTTP, and the production NAS terminates no TLS at
all — so the moment the guard went active, https_enforcement blocked
the entire request stream. It is now hardcoded off at the guard-config
level (TLS and http->https redirects belong to nginx, not the app).
Same calibration pass for the two prose validators the flip armed: the
secret-exfil key pattern requires a real b64-shaped value so the
documented placeholder lines can't block, and the injection override
pattern requires the second-person 'your' so neutral engineering prose
about the guard subsystem passes.

Co-authored-by: Renn F <rennf93@users.noreply.github.com>

2026-07-19 23:28:54 +02:00

..

e2e_smoke

test(forge): live-GitLab contract suite — verified against gitlab.com (#579)

2026-07-19 09:35:19 +02:00

fixtures

Feature: lifecycle canonical spec (#14)

2026-05-11 02:15:47 +02:00

foundation

Feature/video artifact verification (#537)

2026-07-16 19:49:26 +02:00

integration

perf(panel): kanban virtualization + row memoization + scorecards batch endpoint (#594)

2026-07-19 19:42:24 +02:00

property

Chore: reduce analytics complexity (#100)

2026-06-11 04:36:17 +02:00

unit

fix(guard): https enforcement is nginx's layer + calibrate the prose validators (#599)

2026-07-19 23:28:54 +02:00

__init__.py

[beb8cae1] Type-gate tests/ under mypy — fix all errors and flip quality gate (#156) (#157)

2026-06-14 13:43:46 +02:00

conftest.py

test(conftest): pin ambient posture settings — the suite is hermetic now (#598)

2026-07-19 19:12:04 +02:00