2 Commits

Author	SHA1	Message	Date
root	925cb0d7d6	chore: 2.0.0-alpha.9 — security & correctness hardening (Void 3.0 quick wins) ... - Q3: prod void DB role NOSUPERUSER (vector marked trusted; deploy/README documents it) - Q4: buildChildEnv allow-list for the claude subprocess (no OWNER_TOKEN/DATABASE_URL/secrets leak) - Q5: pending-change approve claims-before-applying + reopens on failure (no re-approvable dup) - Q6: /capture/upload validates space_id (UUID+existence); pg pool statement_timeout 30s - Q9: disabled failing syncoid-donatello timer on Z Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-03 07:54:57 +10:00
root	10902bc6ac	feat: real audit_log with redaction + pending_changes; replace stub	2026-05-31 11:04:53 +10:00