fix(security): resolve 36 security audit issues#374

Merged

ElioNeto merged 18 commits into

mainfrom

fix/security-audit-issues

May 26, 2026

Commits on May 25, 2026

Commits on May 26, 2026

feat: template engine, frontmatter validation, WebSocket client, testing infra
ElioNeto
committed
fix(security): enable auth by default, restrict CORS, reduce payload to 1MB, set workers to 4
ElioNeto
committed
fix(api): N+1 scan, batch limit, key/value size limits, rate-limiter sharding
ElioNeto
committed
fix(security): CDC auth/retry, GraphQL playground guard, WS auth, idempotency wiring
ElioNeto
committed
fix(security): encryption on by default, env validation, WAL config, CI audit, CSRF guard
ElioNeto
committed
fix(audit): degradation wiring, backpressure, metrics, health, key validation, perms, request-id logging
ElioNeto
committed
fix(audit): async retry, audit middleware, degradation guards, IP limit, CDC metrics
ElioNeto
committed
fix(audit): dashboard reload, duplicate endpoints, read amp metric, bench CI
ElioNeto
committed
style: cargo fmt across 10 files
ElioNeto
committed