feat(saas): expose redacted operational signals

req: operations/003

req: operations/005

req: operations/007

req: security/008

req: v1_release/003
This commit is contained in:
slhx agent
2026-07-14 00:48:55 +02:00
parent ef8e38adf8
commit 4e0d9ebaff
5 changed files with 300 additions and 22 deletions
+2 -1
View File
@@ -8,7 +8,8 @@ What it proves:
- auth/session context passed through normal Rust state
- CSRF-safe mutation checked before persistence
- local atomic-file persistence adapter with rollback and process-restart proof instead of a vendored SQL/auth provider
- a bounded `POST /projects` reference boundary requiring the current bearer session, exact origin, and CSRF token
- a bounded `POST /projects` reference boundary requiring the current bearer session, exact origin, CSRF token, and matching generated build fingerprint when supplied
- `/health/live`, dependency-aware `/health/ready`, and aggregate `/metrics` endpoints with secret-free structured diagnostics
- generated form, slot, keyed row, page-swap, and live-status commands
- page shell with plain CSS and one explicit metrics island script
- compile-time surface generation plus interaction tests