luckberg/familysync
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
985 Commits 2 Branches 2 Tags
65e62229449a43d3e6d6b7194191e19d1318e80a
Commit Graph
13 Commits
Author SHA1 Message Date
Lucas BergerandClaude Opus 4.8 745e806d89 docs(phase-18): add security threat verification (SECURED, 0 open) 
gsd-security-auditor verified all 13 plan-time STRIDE threats against the
implementation: 8 mitigate confirmed in code (file:line evidence), 5 accept
documented, 4 supply-chain checks (zero new deps). threats_open: 0. ASVS L1,
block_on high — no high-severity gaps. Post-review fixes (WR-01 blank-TZ guard,
WR-02 INSERT IGNORE) verified in code; D-07 boundary confirmed via git diff.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-15 07:58:53 -04:00
Lucas BergerandClaude Opus 4.8 60621468be docs(18): code review clean + fix report (--fix --auto --all) 
Re-review after fixes: status clean (0 Critical/Warning). All 5 findings
from the prior pass resolved across 4 atomic fix commits:
- WR-01: treat empty/blank TZ as unset in the D-06 fallback chain
- WR-02: derive seed `seeded` flag from INSERT IGNORE affectedRows (accurate
  under concurrent race; D-03 no-overwrite preserved)
- IN-01/02: reuse fetched row on GET unset path; centralize D-06 fallback
- IN-03: memoize household timezone per outbox drain cycle

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-15 07:47:40 -04:00
Lucas BergerandClaude Opus 4.8 ea93089b74 docs(18): verification passed + mark phase complete 
Phase-goal verification: 7/7 decision-contract truths confirmed (D-01..D-07).
Browser round-trip re-confirmed via Playwright e2e against the live stack.
Mark phase 18 complete in STATE.md and ROADMAP.md.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-14 23:08:56 -04:00
Lucas Berger 79ea94f4b9 docs(18): mark WR-01/WR-02 resolved in review 
- WR-01: resolved (first-run save enabled — AdminPage.tsx + unit tests)
- WR-02: resolved (seed endpoint idempotent — admin.ts + integration tests)
- WR-03: accepted/not-fixing (redundant GET SELECT, low priority)
- Info items remain as-is (no action required)
 2026-06-14 22:57:05 -04:00
Lucas Berger 9481544a58 docs(18-04): complete admin timezone UI plan 2026-06-14 22:46:21 -04:00
Lucas Berger 9798d795a7 docs(18-03): complete broker rewire plan 2026-06-14 22:33:39 -04:00
Lucas Berger 08c39165bf docs(18-02): complete admin timezone endpoints plan 2026-06-14 22:13:53 -04:00
Lucas Berger ac60161726 docs(18-01): complete household timezone accessor + IANA validator plan 2026-06-14 22:08:37 -04:00
Lucas Berger 68a315e164 docs(18): create phase plan (4 plans, 3 waves) 2026-06-14 21:51:13 -04:00
Lucas Berger efae7159a4 docs(18): add validation strategy 2026-06-14 21:41:06 -04:00
Lucas Berger 12fb5d2adb docs(18): research phase domain 2026-06-14 21:39:56 -04:00
Lucas Berger 5d961b7c37 docs(18): capture phase context 2026-06-14 21:25:40 -04:00
Lucas BergerandClaude Opus 4.8 7d070a6b69 docs: add Phase 18 (timezone) to roadmap; refresh knowledge graph 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-13 21:54:54 -04:00