Reworked and force-pushed as f5bcfdc (one commit, rebased onto current next).
Finding 1 (critical). X-Real-IP and True-Client-IP are now dropped entirely rather than put behind an…
FAIL — needs-rebase. Sole blocker; all four prior findings verified fixed by measurement.
Conflicts with current next
next advanced to 12acf4d ([#179](https://git.eeqj.de/sneak/Autis…
86cdea5e4e
chore: repo policy compliance sweep — test rerun, frozen lockfile, documented targets (closes #166)
PASS — 30-case battery re-run independently under dash and bash as uid 1000 (control 0, every failure case non-zero, no temp file left on any path), plus 12 added attacks (CR/tab/quote/backsla…
PASS at c951028: six added interleavings all clean, make check 183/183 + prettier clean, make test-e2e 13/13 (20/20 with my probes), clean merge onto next at f455b0a with TODO.md…
FAIL — needs-rework. One finding.
**README.md:1090, README.md:1126, docs/README.md:330 — newly written text asserts the known-symbol check is applied uniformly on the balance list. It…
FAIL — needs-rework.
1. internal/handlers/ui_copy_test.go:232 — the new test renders a page that errors out, and passes anyway.
"Webhook": database.Webhook{Name: "wh"} is passed **by…