8 commits

Author	SHA1	Message	Date
rcourtman	bc479643e4	release: prepare v4.25.0	2025-10-22 10:46:18 +00:00
rcourtman	524f42cc28	security: complete Phase 1 sensor proxy hardening ... Implements comprehensive security hardening for pulse-sensor-proxy: - Privilege drop from root to unprivileged user (UID 995) - Hash-chained tamper-evident audit logging with remote forwarding - Per-UID rate limiting (0.2 QPS, burst 2) with concurrency caps - Enhanced command validation with 10+ attack pattern tests - Fuzz testing (7M+ executions, 0 crashes) - SSH hardening, AppArmor/seccomp profiles, operational runbooks All 27 Phase 1 tasks complete. Ready for production deployment.	2025-10-20 15:13:37 +00:00
rcourtman	e367cd384e	fix: normalize version strings with build metadata in tests	2025-10-16 09:07:40 +00:00
rcourtman	958d6218c2	test: cover docker command lifecycle and server info	2025-10-15 19:47:51 +00:00
rcourtman	91fecacfef	feat: add docker agent command handling	2025-10-15 19:27:19 +00:00
rcourtman	5c79d2516d	feat: streamline docker agent onboarding	2025-10-14 09:45:32 +00:00
rcourtman	6475ba8374	fix: Update test version fallback and fix lint warnings #64	2025-10-13 15:50:23 +00:00
rcourtman	f46ff1792b	Fix settings security tab navigation	2025-10-11 23:29:47 +00:00