curo1305andClaude Sonnet 4.6 10970d9557 fix(06): CR-07 validate event_type against allowlist before LIKE filter ...

Add _VALID_EVENT_PREFIXES frozenset and validate event_type at all three
filter sites in audit.py (_build_filtered_query, _build_filtered_query
_with_handles, and the inline count query in list_audit_log). Invalid
values return HTTP 422. Also change like() pattern from prefix% to
prefix.% to enforce true prefix-match semantics.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-04 23:15:48 +02:00

.planning

docs(phase-7): update tracking after wave 4 — plan 07-04 complete

2026-06-04 23:14:08 +02:00

backend

fix(06): CR-07 validate event_type against allowlist before LIKE filter

2026-06-04 23:15:48 +02:00

docker

feat(06-02): add Loki + Promtail + Grafana stack to docker-compose

2026-06-03 18:49:41 +02:00

frontend

fix(06): CR-05 hash attempted email in audit log to avoid PII storage

2026-06-04 23:15:48 +02:00

.env.example

feat(05-01): add Phase 5 cloud storage packages and config settings

2026-05-28 20:48:38 +02:00

.gitignore

chore: add .DS_Store, node_modules/, screenshots/ to .gitignore

2026-05-30 11:58:51 +02:00

.trivyignore

fix(06-06): patch OpenSSL CVE-2026-31789 — add apt-get upgrade to runtime Dockerfile stage

2026-06-04 19:13:05 +02:00

CLAUDE.md

docs: add shared module map to CLAUDE.md, SECURITY.md, planning artifacts

2026-06-02 16:10:59 +02:00

docker-compose.yml

fix(06): CR-01 CR-02 WR-02 WR-05 WR-06 WR-08 docker-compose security hardening

2026-06-04 23:15:48 +02:00

RUNBOOK.md

docs(06-06): add RUNBOOK.md — env vars, startup, backup, health checks, escalation, failure modes

2026-06-04 19:05:05 +02:00

SECURITY.md

docs: add shared module map to CLAUDE.md, SECURITY.md, planning artifacts

2026-06-02 16:10:59 +02:00

TEST_ACCOUNTS.md

chore: commit pending phase-3 work and add TEST_ACCOUNTS.md

2026-05-24 11:30:56 +02:00

test_integration.py

chore: commit pending phase-3 work and add TEST_ACCOUNTS.md

2026-05-24 11:30:56 +02:00

S

Description

No description provided

8.1 MiB

Languages

Python 57.2%

JavaScript 16.5%

HTML 14.2%

Vue 12%