6 commits

Author	SHA1	Message	Date
rcourtman	f2746960d6	Relax mounted storage-root hardening semantics	2026-04-16 21:37:11 +01:00
rcourtman	9855973e5b	Fix non-root storage hardening for Helm startup	2026-04-16 21:26:02 +01:00
rcourtman	4564742c18	Harden outbound SSO fetch boundaries	2026-04-01 16:36:44 +01:00
rcourtman	f1fc17e627	Canonicalize fixed alerts and licensing paths	2026-03-29 14:14:36 +01:00
rcourtman	82b24f5d90	Harden AI storage leaf path handling	2026-03-29 13:35:32 +01:00
rcourtman	d6536932fc	Harden outbound URLs and file-backed storage	2026-03-29 12:47:55 +01:00