Dai Ha 850fb12807 CB-596: member credential blocking is config-driven deny-by-default, not one hardcoded name ...

Replaces CB-592's single hardcoded GITEA_ACCESS_TOKEN shadow in HerdrPeerLauncher
with BridgedConfig.MemberCredentials (memberCredentials: policy/allow/known).
Every known name not also allowed is overlaid with a sentinel; an unrecognized
policy value refuses at load; a credential-shaped host env var on neither list
is logged as a gap (name only, never a value). bridged.yaml is gitignored, so
the 31 measured names + 4-name allowlist ship as a commented block in
bridged.example.yaml for the operator to apply live.

2026-08-17 09:02:21 +02:00

..

docs

CB-307: lock push-loop injection to dedicated status-gated loop (mechanism b)

2026-07-19 09:44:21 +02:00

src

CB-596: member credential blocking is config-driven deny-by-default, not one hardcoded name

2026-08-17 09:02:21 +02:00

.gitignore

CB-5xx: Stage 5 hardening — auth, authz+audit, metrics, CI, supervision

2026-07-29 22:29:26 +07:00

bridged.example.yaml

CB-596: member credential blocking is config-driven deny-by-default, not one hardcoded name

2026-08-17 09:02:21 +02:00

pom.xml

Release 1.0.0 — one leader, one host, complete

2026-08-10 20:58:06 +07:00