fix: keep Alta bearer out of proxy command lines

This commit is contained in:
2026-08-19 22:26:47 +00:00
parent 582fc46914
commit 808698dc46
15 changed files with 207 additions and 101 deletions
+2 -2
View File
@@ -7,11 +7,11 @@
- Implementation plan: `docs/plans/2026-08-19-apt-security-foundation.md`
- Starting package version: `1.0.0`
- Starting audit: 25 findings (1 critical, 22 high, 2 moderate); production-only audit 3 findings (2 high, 1 moderate)
- Starting release state: GitPeji/GitHub split-brain, no application CI, unsafe unsigned updater, no automated tests
- Starting release state: split release hosting, no application CI, unsafe unsigned updater, no automated tests
## Guardrails
- GitPeji only; GitHub remote removed.
- GitPeji only; alternate-host remote removed.
- Production Tool Hub and existing downloads remain unchanged.
- Synthetic sentinel credentials only in tests.
- Work remains on the isolated hardening branch until review gates pass.