J3vb 59ec405595 docs: record final Tauri capability posture and residual risk ...

Update the security doc's capability section with the deny list, the fact
that `http:allow-fetch` is the only URL-scoped HTTP identifier, and why
the https wildcard cannot be removed without moving the link-preview
fetch into Rust. Note under Known Limitations that narrowing the plugin
scope alone does not bound exfiltration while CSP `connect-src` allows
`https:` to any host. Add a capability row to the client architecture
doc and mark the design note implemented.

2026-07-20 14:51:23 +02:00

..

audit-2026-07-19-decisions.md

docs: close audit items 3 and 11 (channel-visibility + V2 dispatch)

2026-07-20 11:44:32 +02:00

channel-visibility-unification.md

docs: close audit items 3 and 11 (channel-visibility + V2 dispatch)

2026-07-20 11:44:32 +02:00

http-tofu-proxy.md

feat(client): TOFU HTTP proxy for REST — close audit A-2026-07-02 (D5)

2026-07-19 14:26:25 +00:00

security-hardening-remediation.md

docs(plans): remediation plan for security-hardening review regressions

2026-07-17 21:55:24 +02:00

slash-commands.md

chore(repo): P0 hygiene for the alpha reset

2026-07-18 11:17:29 +02:00

sqlc-adoption.md

refactor(server/db): delegate messages + reactions to dbgen; finalize D2

2026-07-19 15:48:39 +00:00

tauri-capability-narrowing.md

docs: record final Tauri capability posture and residual risk

2026-07-20 14:51:23 +02:00

v2-dispatch-migration.md

docs: close audit items 3 and 11 (channel-visibility + V2 dispatch)

2026-07-20 11:44:32 +02:00