Heimdall
58fa80bc5b
Make the attempt cookie's deletion Secure so a browser honours it ...
A __Host- cookie is only removed by a Set-Cookie that is itself Secure. The
hardening test now checks Secure on every header, deletion included, and the
completion tests pin that success and refusal both clear the attempt cookie
with Secure, Path=/ and no Domain.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-11-09 11:24:02 +00:00
Make the attempt cookie's deletion Secure so a browser honours it
2026-11-09 11:24:02 +00:00
persona matrix mouth: send gate tests, the captured #swarm head, v2 golden fixtures
2026-11-03 11:02:07 +01:00
Bifrost pump: one verb, one path; refuse anything else with a failed receipt
2026-09-30 16:59:51 +02:00
Watchdog notice reader: a future stamp is eligible now; no production clock seam
2026-10-01 02:19:01 +02:00
persona-mouth: Matrix ear and mouth for Personas (brake-refusing sends, token only in the Authorization header, cursor after ack, one ring per idle window); delete the Discord posting actuator (squash of eureka-body/persona-mouth 1894f65..ab2bdc6; Soul s1)
2026-10-29 19:41:30 +01:00
Prove signed health transport identity
2026-07-22 02:53:44 +01:00
persona matrix mouth: a v2 send is refused if the room moved past her basis; check and PUT are one step per room across every Persona
2026-11-03 11:01:44 +01:00
send gate: re-check the brake after the gate wait, before the PUT
2026-11-03 10:37:22 +00:00
mouth: deliver media events as a typed line
2026-11-03 18:09:43 +00:00
Watchdog notice reader test: status reads the same fake clock as the runs
2026-10-01 02:25:13 +02:00
58fa80bc5b