jenkins bd63b568e1 security(hermes): strip inbound X-Hux-* at the router boundary ...

Defense in depth: the tenant router deletes every browser-supplied
X-Hux-* header before asserting its own HUX identity headers, so no
client can forge subject, trust class, or relay key. Regression covers
X-Hux-Subject, X-Hux-Trust and X-Hux-Relay-Key forgeries.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BvMSXH8VH2tMWXanb8SJdf

2026-08-24 04:12:03 -03:00

..

main_test.go

security(hermes): strip inbound X-Hux-* at the router boundary

2026-08-24 04:12:03 -03:00

main.go

security(hermes): strip inbound X-Hux-* at the router boundary

2026-08-24 04:12:03 -03:00

session_continuity.go

fix(hermes): poll the session contract the chat tenants actually serve

2026-08-20 18:14:55 +00:00

session_snapshot_test.go

fix(hermes): poll the session contract the chat tenants actually serve

2026-08-20 18:14:55 +00:00

session_snapshot.go

fix(hermes): poll the session contract the chat tenants actually serve

2026-08-20 18:14:55 +00:00

telegram_input.go

hermes: harden chat continuity and activity

2026-08-17 14:39:21 +00:00

telegram_media_test.go

hermes: harden chat continuity and activity

2026-08-17 14:39:21 +00:00

telegram_media.go

hermes: harden chat continuity and activity

2026-08-17 14:39:21 +00:00

telegram_test.go

hermes: harden chat continuity and activity

2026-08-17 14:39:21 +00:00

telegram_topics.go

hermes: harden chat continuity and activity

2026-08-17 14:39:21 +00:00

telegram.go

refactor(hermes): rename chat and triage public hosts

2026-08-21 06:43:19 +00:00

web.go

fix(hermes): poll the session contract the chat tenants actually serve

2026-08-20 18:14:55 +00:00