APT v1.1.0 security foundation #1

Merged

peji merged 22 commits from hardening/security-foundation into master 2026-08-22 16:24:35 +00:00

Conversation 0 Commits 22 Files Changed 52

+8901 -4583

peji commented 2026-08-19 22:59:44 +00:00

Owner

Copy Link

Copy Source

Closes the August 2026 APT security review blockers and establishes the v1.1.0 security foundation.

Highlights:

• removes executable self-update and adds check-only GitPeji update status
• removes cookie-bearing shell/batch launch; helper uses interactive username/password/2FA flow
• main-process session authority, narrow sender-validated IPC, redacted errors
• mutually authenticated HMAC extension bridge with DPAPI/Electron secure storage
• scoped proxy lifecycle/disconnect handling
• Electron 43 / patched dependencies; zero npm audit findings
• 94 tests, Windows build, kit verifier, and repository-scoped GitPeji CI

Production/Tool Hub artifacts are unchanged. Windows signing, helper provenance, real Windows end-to-end acceptance, and native Mac remain separate release gates.

Closes the August 2026 APT security review blockers and establishes the v1.1.0 security foundation. Highlights: - removes executable self-update and adds check-only GitPeji update status - removes cookie-bearing shell/batch launch; helper uses interactive username/password/2FA flow - main-process session authority, narrow sender-validated IPC, redacted errors - mutually authenticated HMAC extension bridge with DPAPI/Electron secure storage - scoped proxy lifecycle/disconnect handling - Electron 43 / patched dependencies; zero npm audit findings - 94 tests, Windows build, kit verifier, and repository-scoped GitPeji CI Production/Tool Hub artifacts are unchanged. Windows signing, helper provenance, real Windows end-to-end acceptance, and native Mac remain separate release gates.

peji added 13 commits 2026-08-19 22:59:44 +00:00

docs: record APT security hardening baseline 1215b95df2

feat: add safe GitPeji update checks ceaa0bfdce

fix: add shell-free proxy process manager f5cfdd8560

fix: add main-process Alta session boundary b503b5777a

feat: add paired Chrome bridge authentication b6df6f1a66

fix: integrate hardened APT security boundary 2f492b662d

fix: close APT adversarial runtime gaps cf75ea9bc2

chore: modernize APT runtime and CI 08498653eb

fix: enforce fresh Alta error boundaries 582fc46914

fix: keep Alta bearer out of proxy command lines 808698dc46

fix: support GitPeji tags and interactive helper auth 8dad96c27d

ci: target available GitPeji runner c66d0ce49e

ci: isolate APT GitPeji runner f65273c7a9

peji added 1 commit 2026-08-19 23:16:42 +00:00

fix: confirm proxy exit before disconnect 4a10e6051e

peji added 7 commits 2026-08-20 02:09:33 +00:00

feat: add bounded large-deployment discovery 6a8a4cf95a

feat: add scalable device hierarchy model c65a813e5f

feat: render scalable Alta site and group hierarchy 8d256cd4ab

fix: harden hierarchy keys and virtual navigation 3b5e2acb75

fix: contain malformed metadata and stale discovery 7d484a3998

fix: allow manual virtual tree scrolling 43892865c3

chore: version APT hierarchy test build 1.2.0 c08d2ad381

peji added 1 commit 2026-08-22 16:20:14 +00:00

feat: release passwordless hierarchical APT v1.2.5 ace4568f81

peji merged commit f228e31d1c into master 2026-08-22 16:24:35 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

bug

Something isn't working

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

question

Further information is requested

wontfix

This will not be worked on

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

peji

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: peji/Alta-Proxy-Tool#1