Diego Rodrigues de Sa e Souza e039077312 fix(security): pin token exchange and warn on salt fallback (#14487) (#15913) ... Batch-merged with the owner's 2026-10-09 PR wave (/merge-batch). Validated in one combined tree of 57 boarded PRs on top of release/v3.8.52 (35ef635c): typecheck:core, check:open-sse-typecheck, check-deps, changelog-integrity, complexity + cognitive ratchets, check:docs-all, i18n UI coverage, ESLint on all 247 changed source files — all green for this wave; 89 focused unit test files (739/744 pass under node:test, the 4 UI .tsx files re-run under vitest 13/13, check-deps fixed in #15912). Remaining reds in that tree belong only to held/draft PRs outside this wave (#15790 file-size, #15780 open-sse types).		2026-10-09 12:46:50 -03:00
..
AGENTROUTER_WAF.md	fix(resilience): recover idle-capacity limiter wedges early (#9041)	2026-08-11 04:30:29 -03:00
BAN_DETECTION.md	fix(providers): a Google Cloud Code / Antigravity 403 VALIDATION_REQUIRED no longer permanently bans the connection (#14848)	2026-09-28 22:08:47 -03:00
CLI-CONFIGURATION.md	fix(cli): secure configuration previews and atomic writes (#14381)	2026-09-23 21:50:24 -03:00
CLI_TOKEN.md	fix(security): pin token exchange and warn on salt fallback (#14487) (#15913)	2026-10-09 12:46:50 -03:00
COMPLIANCE.md	chore(startup): remove server-init.ts, a module nothing imports (#10780)	2026-08-20 10:27:26 -03:00
CORS.md	fix(authz): treat every forwarding header as the mark of a proxied request (#15060)	2026-09-29 07:06:10 -03:00
EGRESS_POLICY.md	fix(docs): keep operator-internal security writeups out of public /docs (#13136)	2026-09-11 19:28:02 -03:00
ERROR_SANITIZATION.md	fix(ci): make check:error-helper trust the call, not the file (#15159 G-03) (#15376)	2026-10-06 17:16:08 -03:00
GUARDRAILS.md	security(video): close response-cache transcript retention gaps (#14373)	2026-09-23 21:49:52 -03:00
INFERENCE_AUTH_POSTURE.md	feat(security): warn at boot when the inference server is exposed anonymously (#13820)	2026-09-18 11:33:39 -03:00
meta.json	feat(security): warn at boot when the inference server is exposed anonymously (#13820)	2026-09-18 11:33:39 -03:00
MITM-TPROXY-DECRYPT.md	Release v3.8.49 (#7076)	2026-07-29 15:18:55 -03:00
PUBLIC_CREDS.md	[v3.8.50] feat(devin-desktop): replace public Windsurf provider (#8228)	2026-08-12 08:40:18 -03:00
ROUTE_GUARD_TIERS.md	fix(authz): stop the resilience connections page from logging remote users out (#14478)	2026-09-24 03:27:54 -03:00
SOCKET_DEV_FINDINGS.md	docs: fix references to files and scripts that no longer exist (#14972)	2026-09-28 21:23:25 -03:00
STEALTH_GUIDE.md	fix(claude): stale CLAUDE_USER_AGENT pin and message-threads beta (#15740, #15705) (#15808)	2026-10-08 03:27:52 -03:00
SUPPLY_CHAIN.md	fix(security): document accepted-risk extract-zip advisories + regression guard (#14482) (#14564)	2026-09-23 21:47:59 -03:00