2 commits

Author	SHA1	Message	Date
varutasu	ad0e254324	chore(convoys): mark shipped convoys and refresh ship-readiness (#66) ... Close stale convoy frontmatter for merged scanner, lint, and hygiene work; record P1 #11.5 and queued follow-ups as RESOLVED with PR references. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-06-02 11:01:27 -05:00
varutasu	8c58990fd9	fix(security): stop leaking Gemini API key to browsers (#34) ... Delete the public /api/config/gemini endpoint and remove client auto-load paths so GEMINI_AI_API_KEY stays server-side only. Add a scan rate-limit class for the upcoming server-side identify route and a CI gate that blocks reintroducing config key leaks or new browser LLM URLs. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-27 08:41:48 -05:00