Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Heimdall 58fa80bc5b Make the attempt cookie's deletion Secure so a browser honours it ... A __Host- cookie is only removed by a Set-Cookie that is itself Secure. The hardening test now checks Secure on every header, deletion included, and the completion tests pin that success and refusal both clear the attempt cookie with Secure, Path=/ and no Domain. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>		2026-11-09 11:24:02 +00:00
..
Bridge	Enforce named future bridge surfaces	2026-06-22 16:44:14 +01:00
ConceptVotes	Make every cookie host-only: __Host- names, Secure, Path=/, no Domain	2026-11-07 18:42:43 +00:00
GitHub	Implement alpha foundation workflow and GitHub sync	2026-04-22 09:50:31 +01:00
Heimdall	Make the attempt cookie's deletion Secure so a browser honours it	2026-11-09 11:24:02 +00:00
Membership	Add native Bifrost identity registration	2026-06-22 15:07:22 +01:00
Motions	Move public crossings onto typed Bifrost transport	2026-07-15 22:16:07 +01:00
Oidc	Logout reconciler: one subject's unexpected exception does not stop the pass	2026-10-28 01:50:54 +01:00
Patronage	Add project-scoped patronage checkout	2026-07-05 19:07:48 +01:00
Shared	Make every cookie host-only: __Host- names, Secure, Path=/, no Domain	2026-11-07 18:42:43 +00:00