|
|
6e62208f82
|
docs: A-3 verification report — all fixes verified
All 9 auth middleware fixes confirmed correct:
- F-A3-11: JWT secret leak removed, ETHOS log format
- F-A3-7: Config download protected (WebAuthMiddleware)
- F-A3-6: Update download protected (AuthMiddleware)
- F-A3-10: Scheduler stats on WebAuthMiddleware
- F-A3-13: RequireAdmin implemented, 7 routes re-enabled
- F-A3-12: JWT issuer claims with backward compat grace period
- F-A3-2: /auth/verify endpoint fixed
- F-A3-9: Agent unregister rate-limited
- F-A3-14: CORS origin configurable
41 tests pass (27 server + 14 agent). No regressions.
Zero issues found during verification.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
2026-03-29 06:07:57 -04:00 |
|
