Claude 8c768bf4c6 docs: add design note for the client HTTP TOFU proxy (D5) ...

Pins the implementation approach for closing audit finding A-2026-07-02:
a loopback TCP-to-TLS tunnel reusing the livekit_proxy pattern and the
shared per-host fingerprint store, with ws_proxy-equivalent TOFU
first-trust/mismatch flows (required because the first TLS contact with
a server is the login HTTP request), per-host tunnel lifecycle for
multi-profile health polling, and removal of the acceptInvalidCerts
path plus the dangerous-settings feature flag as the ratchet.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UA17KPvqGBX3XbXYnMf1rA

2026-07-19 13:58:58 +00:00

..

audit-2026-07-19-decisions.md

docs: add design note for the client HTTP TOFU proxy (D5)

2026-07-19 13:58:58 +00:00

http-tofu-proxy.md

docs: add design note for the client HTTP TOFU proxy (D5)

2026-07-19 13:58:58 +00:00

security-hardening-remediation.md

docs(plans): remediation plan for security-hardening review regressions

2026-07-17 21:55:24 +02:00

slash-commands.md

chore(repo): P0 hygiene for the alpha reset

2026-07-18 11:17:29 +02:00