a.tolmachev
1.2 KiB
1.2 KiB
TASKS
Current
feat/secret-crypto-hkdf
Status: in_progress
DoD:
- master key derivation uses HKDF-SHA256 instead of raw SHA256
- secret encryption/decryption compatibility is explicit and tested
- admin-api and runtime continue to handle secret crypto through the shared path
Next
feat/postgres-pool-config
Backlog
feat/frontend-xss-hardeningfeat/frontend-login-simplificationfeat/frontend-settings-honesty-passfeat/frontend-command-palette-decisionfeat/frontend-plural-rulesfeat/frontend-template-safety-cleanupfeat/frontend-shell-unificationfeat/frontend-wizard-modularizationfeat/frontend-css-state-cleanupfeat/frontend-performance-polishfeat/frontend-observability-and-testabilityfeat/id-display-supportfeat/postgres-pool-configfeat/postgres-registry-modularizationfeat/sqlx-compile-time-verificationfeat/secret-crypto-hkdffeat/typed-timestampsfeat/error-structure-normalizationfeat/correlation-id-propagationfeat/runtime-rate-limiting-and-backpressurefeat/distributed-mcp-session-storefeat/websocket-test-run-polishfeat/live-authenticated-staging-entry