Close the direct run.app door with a shared-secret origin gate - #11208

Merged

MarkusNeusinger merged 15 commits into

mainfrom

feat/origin-secret-gate

Sep 2, 2026

Commits on Sep 2, 2026

Close the direct run.app door with a shared-secret origin gate

MarkusNeusinger
and
claude
committed
db22e54
Point the changelog entries at this PR's number

MarkusNeusinger
and
claude
committed
eac2d8d
Close the seo-proxy bypass and compare the header as bytes

MarkusNeusinger
and
claude
committed
4be71da
Keep the Cloudflare API token out of curl's argument vector

MarkusNeusinger
and
claude
committed
a78d224
Correct the settings docstring that still claimed seo-proxy is exempt

MarkusNeusinger
and
claude
committed
3f75335
Merge origin/main, and share one byte-wise secret comparator

MarkusNeusinger
and
claude
committed
f6f755e
Merge origin/main (#11207, #11209) into the origin-gate branch

MarkusNeusinger
and
claude
committed
a8d7acc
Promote by revision name when arming or rolling back, never --to-latest

MarkusNeusinger
and
claude
committed
b922c61
Guard the arm procedure against an in-flight candidate and a floating secret

MarkusNeusinger
and
claude
committed
ce03fbc
Label the post-deploy verdict as off-seen, not ok

MarkusNeusinger
and
claude
committed
eb944f7
Name the residual the gate does not close: the app origin relays

MarkusNeusinger
and
claude
committed
56467da
Keep the rollback executable, and state that break-glass now needs both headers

MarkusNeusinger
and
claude
committed
622f751
Make the operational blocks fail-fast, race-aware and leak-free

MarkusNeusinger
and
claude
committed
34f1604
Write the rollback out as its own block, with no secret lookup

MarkusNeusinger
and
claude
committed
b56be24
Merge origin/main (#11206, #11210) into the origin-gate branch

MarkusNeusinger
and
claude
committed
68389a6

Navigation Menu

Close the direct run.app door with a shared-secret origin gate - #11208

Close the direct run.app door with a shared-secret origin gate#11208
MarkusNeusinger merged 15 commits into
mainfrom
feat/origin-secret-gate

Commits on Sep 2, 2026

Close the direct run.app door with a shared-secret origin gate

Point the changelog entries at this PR's number

Close the seo-proxy bypass and compare the header as bytes

Keep the Cloudflare API token out of curl's argument vector

Correct the settings docstring that still claimed seo-proxy is exempt

Merge origin/main, and share one byte-wise secret comparator

Merge origin/main (#11207, #11209) into the origin-gate branch

Promote by revision name when arming or rolling back, never --to-latest

Guard the arm procedure against an in-flight candidate and a floating secret

Label the post-deploy verdict as off-seen, not ok

Name the residual the gate does not close: the app origin relays

Keep the rollback executable, and state that break-glass now needs both headers

Make the operational blocks fail-fast, race-aware and leak-free

Write the rollback out as its own block, with no secret lookup

Merge origin/main (#11206, #11210) into the origin-gate branch