2 commits

Author	SHA1	Message	Date
Randall Stillwell	ff73743a9f	docs(convoy): close redesign-scanner-flow post-PR audit ... Record audit-redesign-scanner-flow-44 rollup and queue follow-up convoys from reviewer, design-system, and a11y fan-out on PRs #42–#44. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-27 14:09:50 -05:00
varutasu	8c58990fd9	fix(security): stop leaking Gemini API key to browsers (#34) ... Delete the public /api/config/gemini endpoint and remove client auto-load paths so GEMINI_AI_API_KEY stays server-side only. Add a scan rate-limit class for the upcoming server-side identify route and a CI gate that blocks reintroducing config key leaks or new browser LLM URLs. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-05-27 08:41:48 -05:00