Repository navigation

fix(aster-srv): 0.24.1 security fixes N1-N15 from the second review - #191

Merged

calvin-archastro merged 23 commits into

mainfrom

calvin/aster-0.24.1-security

Oct 23, 2026

Merged

fix(aster-srv): 0.24.1 security fixes N1-N15 from the second review#191
calvin-archastro merged 23 commits into
mainfrom
calvin/aster-0.24.1-security

Commits on Oct 23, 2026
- fix(aster-srv): N1 enforce the writer policy in the gate before reading the body
  
  calvin-archastro
  and
  claude
  committed
  efdd1ad
- fix(aster-srv): N3 short body timeout for unauthenticated routes and a per-IP cap
  
  calvin-archastro
  and
  claude
  committed
  2ac7a37
- fix(aster-srv): N4 refuse to start the API listener without its hardening settings
  
  calvin-archastro
  and
  claude
  committed
  42a1617
- fix(aster-srv): N7 shard the rate limiter overflow and throttle its sweep
  
  calvin-archastro
  and
  claude
  committed
  b1d193c
- fix(aster-srv): N9b stop failed fetches and probes from suppressing a real key rotation
  
  calvin-archastro
  and
  claude
  committed
  d5fc8c7
- fix(aster-srv): N10 answer another repository's run id with a plain 404
  
  calvin-archastro
  and
  claude
  committed
  67af47a
- fix(aster-srv): N15 sample failure audit lines and summarise the rest
  
  calvin-archastro
  and
  claude
  committed
  065d531
- fix(aster-srv): N12 treat repeated X-Forwarded-For lines as one list and test the trusted hop
  
  calvin-archastro
  and
  claude
  committed
  8ad9bdb
- fix(aster-srv): N8 document the operator revoke for a departed person and test its SQL
  
  calvin-archastro
  and
  claude
  committed
  cccb944
- docs(aster-srv): N9 runbook for rotating ASTER_SRV_CLI_TOKEN_KEYS and the kill switch
  
  calvin-archastro
  and
  claude
  committed
  199d5eb
- fix(aster-srv): N1 N3 N9b pass CI clippy and rustdoc with -D warnings
  
  calvin-archastro
  and
  claude
  committed
  f57b378
- N13: count lookups only for writer-eligible CI callers
  
  calvin-archastro
  and
  claude
  committed
  c67c9ae
- N5 (1/2): remember blob existence and reuse signed URLs, bounded
  
  calvin-archastro
  and
  claude
  committed
  4c6248f
- N5 (2/2): bound lookup fan-out per request and cap blobs per response
  
  calvin-archastro
  and
  claude
  committed
  18fbab7
- N5: give each lookup a time budget and document the bounds
  
  calvin-archastro
  and
  claude
  committed
  eba438e
- N13: test that a person's lookup does not count, and document who counts
  
  calvin-archastro
  and
  claude
  committed
  0e6434f
- fix(client): N6 require https for every ASTER_SRV_URL client unless loopback
  
  calvin-archastro
  and
  claude
  committed
  08288ec
- fix(srv,cli): N11 label confirm-page details by source and warn against sharing codes
  
  calvin-archastro
  and
  claude
  committed
  e7d5334
- fix(aster-srv): N2 carry the OIDC run_attempt claim on the identity
  
  calvin-archastro
  and
  claude
  committed
  a002489
- fix(aster-srv): N2 bind uploaded runs to the uploading job's OIDC claims
  
  calvin-archastro
  and
  claude
  committed
  90fe648
- fix(aster-srv): N2 quarantine only on claim-backed default-branch evidence
  
  calvin-archastro
  and
  claude
  committed
  3901bc5
- docs(aster-srv): the person-token TTL doc names the 12-hour cap the code enforces
  
  calvin-archastro
  and
  claude
  committed
  12e7198
- test(aster-srv): N2 bind the e2e CI uploads to per-run OIDC claims
  
  calvin-archastro
  and
  claude
  committed
  3db4301

Commits

Commits on Oct 23, 2026