vrr/Ruview
2
0
Fork 0
mirror of https://github.com/ruvnet/RuView.git synced 2026-05-19 08:10:07 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 12
Ruview/docs
History
ruv 47223a98be fix: security hardening — replace fake HMAC, add path traversal protection, OTA auth (ADR-050) 
Sprint 1 security fixes from quality engineering analysis (issue #170):

- Replace XOR-fold fake HMAC with real HMAC-SHA256 (hmac + sha2 crates) in secure_tdm.rs
- Add path traversal sanitization on DELETE /api/v1/models/:id and /api/v1/recording/:id
- Default bind address changed from 0.0.0.0 to 127.0.0.1 (configurable via --bind-addr / SENSING_BIND_ADDR)
- Add PSK authentication to ESP32 OTA firmware upload endpoint (ota_update.c)
- Flip WASM signature verification to default-on (CONFIG_WASM_SKIP_SIGNATURE opt-out vs opt-in)
- Add 6 new security tests: HMAC key/message sensitivity, determinism, wrong-key rejection, bit-flip detection, enforcing mode
- Add clap env feature for environment variable configuration

All 106 hardware crate tests pass. Sensing server compiles clean.

Closes #170

Co-Authored-By: claude-flow <ruv@ruv.net>
2026-03-06 13:11:04 -05:00
..
adr fix: security hardening — replace fake HMAC, add path traversal protection, OTA auth (ADR-050) 2026-03-06 13:11:04 -05:00
ddd docs: update README with ADR-045–048, Observatory, adaptive classifier, AMOLED display 2026-03-05 10:20:48 -05:00
edge-modules feat: add ADR-042 CHCI protocol, 24 new edge modules, README restructure 2026-03-03 11:35:57 -05:00
research Merge remote-tracking branch 'origin/claude/use-cases-implementation-plan-tT4s9' into ruvsense-full-implementation 2026-03-01 21:21:24 -05:00
build-guide.md docs: Add comprehensive build guide for all environments 2026-02-28 06:53:37 +00:00
security-audit-wasm-edge-vendor.md feat: implement 24 vendor-integrated WASM edge modules (ADR-041) 2026-03-03 00:29:36 -05:00
user-guide.md feat: adaptive CSI classifier with signal smoothing pipeline (ADR-048) (#144) 2026-03-05 10:15:18 -05:00
wifi-mat-user-guide.md docs: Add comprehensive wifi-Mat user guide and fix compilation 2026-01-13 17:55:50 +00:00
WITNESS-LOG-028.md feat: 100% validated witness bundle with proof hash + generator script 2026-03-01 15:51:38 -05:00