Heimdall/notes
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Heimdall b8b62f10e5 Blank connection targets are refused; pin the app-secret gate on every managed provider
A connect start naming a connection target already needed the app's own secret, but the gate was
pinned for Joystick only and a whitespace or zero-width targetId passed both the start gate and the
callback mint. One predicate now serves both; the gate is pinned for twitch, youtube and joystick,
and the note for StreamPixels says what its redeem must do.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-11-08 21:44:30 +00:00
..
fresh-workspace-handoff.md State: live d51fa6b proven by a human Twitch sign-in; Joystick consent remains 2026-10-19 18:03:17 +02:00
streampixels-connect-redeem.md Blank connection targets are refused; pin the app-secret gate on every managed provider 2026-11-08 21:44:30 +00:00