Audit remediation: security, correctness, billing, UX (Phases 0–5) - #4

Merged

createpjf merged 62 commits into

mainfrom

fix/audit-remediation

Jun 11, 2026

Commits on Jun 10, 2026

docs: add audit remediation design (6-phase fix plan)

createpjf
and
claude
committed
96f38b8
docs: add Phase 0 security hardening implementation plan

createpjf
and
claude
committed
188274a
fix(gateway): bind to 127.0.0.1 to prevent LAN exposure (C1)
createpjf
committed
fd02b26
fix(gateway): constant-time token comparison (C3)
createpjf
committed
ee7ee6a
fix(gateway): mask auth token in startup logs (C2a)
createpjf
committed
f6f99cf
fix(desktop): discard gateway stdout to prevent leak/deadlock (C2b)
createpjf
committed
100067c
fix(gateway): SSRF allowlist + no-redirect for local providers (H2-sec)
createpjf
committed
7113bd3
harden(gateway): no-redirect on forwarding + document SSRF limitation + regression tests (H2-sec)
createpjf
committed
acfe210
fix(cloud): do not reflect ACAO '*' for no-origin requests (H3-sec)
createpjf
committed
9a8d54a
feat(gateway): add AES-256-GCM secrets module (M4-sec)

createpjf
and
claude
committed
6ca123d
feat(gateway): encrypt provider keys and auth token at rest (C2c, M4-sec)

createpjf
and
claude
committed
d03be60
feat(cloud): AES-256-GCM secret helpers + enforce encryption key in prod (M4-sec)

createpjf
and
claude
committed
7597dc9
feat(cloud): encrypt provider keys at rest, decrypt on read (M4-sec)
createpjf
committed
35475ec
feat(desktop): provision ROUTEBOX_DB_KEY from keychain for at-rest encryption (M4-sec)
createpjf
committed
671f97a
chore(desktop): document/narrow Tauri entitlements (H4-sec)

createpjf
and
claude
committed
55637e3
harden: skip undecryptable provider keys at startup instead of crashing (M4-sec)
createpjf
committed
e8d267e

Commits on Jun 11, 2026