Full deployment history for this project.
chore: merge open PRs into main
chore: merge open PRs into main
Merge PR #111: 🛡️ Sentinel: [security improvement] Fix duplicate identifier and register t
🎨 Palette: Improve keyboard focus ring and accessibility of publisher page links
⚡ Bolt: optimize HTML meta tag parsing in parseVisibleIdentity
🛡️ Sentinel: [HIGH] Fix SSRF bypass for bracketed IPv6 literals Clean and strip square brackets from IPv6 hostnames extracted via WHATWG URL parsing before evaluating with net.isIP() and DNS lookup. Normalize IPv4-mapped IPv6 addresses (both dotted-decimal and hex notation) and block unspecified/loopback IPv6 addresses to prevent SSRF bypasses against internal or loopback resources.
🎨 Palette: improve breadcrumb accessibility and keyboard focus indicators
⚡ Bolt: Optimize visible identity parsing in route evidence with single-pass regex - Replace dynamic RegExp instantiation and multi-pass HTML scanning in parseVisibleIdentity with top-level pre-compiled regexes (META_TAG_RE and CANONICAL_RE). - Parse HTML meta tags in a single matchAll pass into a Map lookup data structure. - Reduces visible identity extraction CPU time by ~6x while eliminating RegExp compilation churn and garbage collection pressure.
🛡️ Sentinel: [CRITICAL/HIGH] Fix SSRF bypass via IPv4-mapped IPv6, unspecified IPv6, and bracketed hostnames Fix Server-Side Request Forgery (SSRF) bypasses in assertSafeUrl: - Update BLOCKED_V6 regex to block unspecified IPv6 addresses (:: and 0:0:0:0:0:0:0:0). - Strip brackets from parsed.hostname before calling net.isIP() to correctly detect bracketed IPv6 literals. - Normalize IPv4-mapped IPv6 addresses by stripping ::ffff: before evaluating against BLOCKED_V4. - Add unit tests in tests/route-evidence-contract.test.mjs to verify SSRF rejection. - Document critical security learning in .jules/sentinel.md.
⚡ Bolt: optimize W3C tracestate and baggage header sanitization (#130)
🎨 Palette: refactor Breadcrumbs with UI components and focus rings
⚡ Bolt: optimize W3C tracestate and baggage header sanitization
🛡️ Sentinel: [HIGH] Fix SSRF bypasses via IPv4-mapped IPv6 and unspecified IPv6 addresses - Strip square brackets from IPv6 hostnames before calling isIP - Normalize IPv4-mapped IPv6 addresses to standard IPv4 for BLOCKED_V4 checks - Expand BLOCKED_V6 regex to catch unspecified IPv6 addresses - Add tests in route-evidence-contract.test.mjs
⚡ Bolt: optimize tracestate and baggage header sanitization
🎨 Palette: Enhance Breadcrumbs accessibility and focus indicators Enhance the Breadcrumbs component in components/layout.tsx to improve screen reader accessibility and keyboard navigation across all TrustOps pages: - Mark decorative ChevronRight separator icons with aria-hidden="true" and shrink-0 - Add flex-wrap to list container to prevent overflow on mobile viewports - Add focus-visible ring styles and smooth transitions to breadcrumb links - Style current page text with font-medium for clearer visual hierarchy
🎨 Palette: Elevate Breadcrumbs keyboard accessibility and screen-reader presentation
🛡️ Sentinel: enforce max URL length on route-evidence GET
🛡️ Sentinel: enforce route-evidence target URL length limit Enforce maximum length bound (2048 characters) on target URLs in GET /api/v1/route-evidence to prevent memory exhaustion and DoS. Update route evidence contract tests to verify input length check.
Accept bounded shared route evidence context
feat: sample sitemap trust identity evidence
feat: expand trust identity evidence
feat: expand trust identity evidence
feat: expand trust identity evidence
feat: expand trust identity evidence
feat: expand trust and well-known evidence
feat: expand trust and well-known evidence
feat: add target trust route evidence
fix: keep trust trace tests portable
chore: auto-close PR #100 via merge path
chore: auto-close PR #97 via merge path
chore: auto-close PR #94 via merge path
chore: auto-close PR #91 via merge path
chore: auto-close PR #89 via merge path
chore: auto-close PR #88 via merge path
chore: auto-close PR #84 via merge path
chore: auto-close PR #81 via merge path
chore: auto-close PR #80 via merge path
chore: auto-close PR #79 via merge path
chore: auto-close PR #78 via merge path
chore: stack PR #97
chore: stack PR #91
chore: stack PR #84
chore: stack PR #78
Merge pull request #77 from mbarbine/consolidate/platphorm-trustops-20260811-cont3 consolidate 54 PRs into one commit
Merge pull request #21 from mbarbine/jules-14672560264855430987-0e969cb5 🛡️ Sentinel: [HIGH] Fix validation bypass in route-compliance
Merge pull request #22 from mbarbine/jules-8168400614118269509-8f920044 🎨 Palette: Add Accessible Tooltips for Scorecard Checklist Items
Merge pull request #20 from mbarbine/bolt/safe-jsonld-cache-14526226450586656946 ⚡ Bolt: Optimize JSON-LD serialization via non-enumerable property caching
fix: trace meaningful trustops mcp actions
feat: publish native TrustOps MCP capabilities