Heimdall
f03027d929
desk: envelope names, decider bounds, a failing port is unavailable, hardening tests ...
The door context carries mind, authority, subject and deciders (fork-card.md M5).
Deciders are 1 to 64 unique ids per Mind, refused at startup and again before any
door call. A throwing credential port or account lookup answers 503 unavailable.
Startup refuses two Minds sharing one socket. Behavioural tests for the per-Mind
list, the body cap to the byte, Retry-After, audience case, no-store, cancellation
and the stale-fork card read.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-11-10 20:15:05 +00:00
Concept vote rate limits: cast and mint budgets per account or network prefix
2026-10-11 09:00:23 +02:00
desk: the answer route on credential and door ports (H3a)
2026-11-10 19:28:52 +00:00
desk: re-pin the vendored vectors to CultLib 89755b08
2026-11-10 20:10:52 +00:00
desk: envelope names, decider bounds, a failing port is unavailable, hardening tests
2026-11-10 20:15:05 +00:00
desk: envelope names, decider bounds, a failing port is unavailable, hardening tests
2026-11-10 20:15:05 +00:00
desk: envelope names, decider bounds, a failing port is unavailable, hardening tests
2026-11-10 20:15:05 +00:00
Make every cookie host-only: __Host- names, Secure, Path=/, no Domain
2026-11-07 18:42:43 +00:00
Logout tests: pin the loop's own tick-failure catch now that subject faults are isolated
2026-10-28 01:57:31 +01:00
Bifrost as OIDC issuer for the Matrix chat (gamecult-chat cut bifrost-oidc-issuer, squash of 1ef289a..ec4acfa and abd12b3..)
2026-10-27 04:57:16 +01:00
Concept vote rate limits: cast and mint budgets per account or network prefix
2026-10-11 09:00:23 +02:00
Signed Mind intake: verify before revealing state, dummy verify, issuedAt window and nonce pruning, per-source rate limit and body cap, one account per persona, DbUpdateException is replay only for the nonce
2026-11-09 20:54:06 +00:00
f03027d929