• Joined on 2022-09-18
kpcto merged pull request Fabrika/PersonalBlog#404 2026-08-30 05:47:44 +00:00
[E00-S04-T05] .env.example contains placeholders only
kpcto commented on issue Fabrika/PersonalBlog#186 2026-08-30 05:41:59 +00:00
[E00-S04-T05] .env.example contains placeholders only
agent: security
verdict: approve
issue: 186
pr: 404
head_sha: f4a282df9e59ceb06383e2dc37f2219626a338a2
human_signoff: kpcto
summary: 
kpcto commented on issue Fabrika/PersonalBlog#186 2026-08-30 05:32:29 +00:00
[E00-S04-T05] .env.example contains placeholders only

Human-maintainer decision (kpcto) — resolves security-review finding F1 (pipeline tripwire / needs-human-decision) on PR #404 (head f4a282d).

I approve the new additive env-example CI…

kpcto closed issue Fabrika/PersonalBlog#185 2026-08-30 05:03:00 +00:00
[E00-S04-T04] No module reads process.env except configuration adapter
kpcto deleted branch feature/185 from Fabrika/PersonalBlog 2026-08-30 05:02:52 +00:00
kpcto pushed to main at Fabrika/PersonalBlog 2026-08-30 05:02:51 +00:00
1e0f628651 Merge pull request '[E00-S04-T04] No module reads process.env except configuration adapter' (#403) from feature/185 into main
ffda249617 docs: document HOST validation and bind control (E00-S04-T04)
408f33e4e9 test: lock in HOST validation and bind-interface control (E00-S04-T04)
345ceccfad feat: HOST validated at the adapter boundary and controls the actual bind interface (E00-S04-T04)
73a1ae88cd chore: drop unused mkdirSync import in the env-adapter suite (E00-S04-T04)
Compare 10 commits »
kpcto merged pull request Fabrika/PersonalBlog#403 2026-08-30 05:02:50 +00:00
[E00-S04-T04] No module reads process.env except configuration adapter
kpcto commented on issue Fabrika/PersonalBlog#185 2026-08-30 05:01:15 +00:00
[E00-S04-T04] No module reads process.env except configuration adapter
agent: reviewer
verdict: approve
reviewed:
  pr: 403
  issue: 185
  head_branch: feature/185
  head_sha: ffda249617bcc3a940fc58b2809b76110804949b
summary: 
kpcto commented on issue Fabrika/PersonalBlog#185 2026-08-30 04:59:25 +00:00
[E00-S04-T04] No module reads process.env except configuration adapter
agent: security
verdict: approve
issue: 185
pr: 403
head_sha: ffda249617bcc3a940fc58b2809b76110804949b
human_signoff: kpcto
summary: 
kpcto commented on issue Fabrika/PersonalBlog#185 2026-08-30 04:51:30 +00:00
[E00-S04-T04] No module reads process.env except configuration adapter

Human-maintainer decision (kpcto) — resolves security-review finding SEC-1 (pipeline tripwire / needs-human-decision) on PR #403 (head ffda249).

I confirm the new config-env-adapter CI…

kpcto commented on issue Fabrika/PersonalBlog#185 2026-08-30 04:43:25 +00:00
[E00-S04-T04] No module reads process.env except configuration adapter
agent: reviewer
verdict: request-changes
reviewed:
  pr: 403
  issue: 185
  head_branch: feature/185
  head_sha: 73a1ae88cd2c67f5b543f975bcb452d4288c0478
summary: 
kpcto commented on issue Fabrika/PersonalBlog#185 2026-08-30 04:37:43 +00:00
[E00-S04-T04] No module reads process.env except configuration adapter
agent: reviewer
verdict: request-changes
reviewed:
  pr: 403
  issue: 185
  head_branch: feature/185
  head_sha: 73a1ae88cd2c67f5b543f975bcb452d4288c0478
summary: 
kpcto closed issue Fabrika/PersonalBlog#184 2026-08-30 04:00:54 +00:00
[E00-S04-T03] Secrets automatically redact from logs
kpcto deleted branch feature/184 from Fabrika/PersonalBlog 2026-08-30 04:00:45 +00:00
kpcto pushed to main at Fabrika/PersonalBlog 2026-08-30 04:00:44 +00:00
072f5c5785 Merge pull request '[E00-S04-T03] Secrets automatically redact from logs' (#402) from feature/184 into main
ae900589c3 docs: document the redacted resolved-configuration log in the non-container guide (E00-S04-T03)
60bd097b70 test: lock in secret redaction from logs with static, mutation and deterministic probes (E00-S04-T03)
6458013306 feat: secrets redact from logs via config redaction layer and server redacting logger (E00-S04-T03)
Compare 4 commits »
kpcto merged pull request Fabrika/PersonalBlog#402 2026-08-30 04:00:44 +00:00
[E00-S04-T03] Secrets automatically redact from logs
kpcto closed issue Fabrika/PersonalBlog#183 2026-08-30 03:32:34 +00:00
[E00-S04-T02] Missing required setting gives field-specific startup error
kpcto deleted branch feature/183 from Fabrika/PersonalBlog 2026-08-30 03:32:28 +00:00
kpcto pushed to main at Fabrika/PersonalBlog 2026-08-30 03:32:26 +00:00
ebb9d4f421 Merge pull request '[E00-S04-T02] Missing required setting gives field-specific startup error' (#397) from feature/183 into main
873264004a docs: document the required EPPP_SESSION_SECRET and the startup error in the non-container guide (E00-S04-T02)
1a9fd592d9 test: lock in the field-specific startup error with static, mutation and deterministic probes (E00-S04-T02)
0ce790fca3 feat: missing required setting fails startup with a field-specific error (E00-S04-T02)
Compare 4 commits »
kpcto merged pull request Fabrika/PersonalBlog#397 2026-08-30 03:32:25 +00:00
[E00-S04-T02] Missing required setting gives field-specific startup error