security-auditor 5b7b669b4c docs(ratelimit): tighten dev-mode comment after keyFor refactor ... The previous comment said "all share one IP bucket" — accurate before the keyFor refactor, slightly stale after it. The dev-mode rationale (bucket fills fast, blanks the page on a single-user dev box) is unchanged; only the bucket-key flavour text needed updating. Doc-only follow-up from #60's hostile self-review #3. No behavior change. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-07 14:57:21 -07:00
..
devmode_test.go
devmode.go
mcp_ratelimit_test.go
mcp_ratelimit.go
ratelimit_keyfor_test.go	fix(ratelimit): tenant-aware bucket keying — close canvas 429 storm	2026-05-07 14:51:08 -07:00
ratelimit_test.go
ratelimit.go	docs(ratelimit): tighten dev-mode comment after keyFor refactor	2026-05-07 14:57:21 -07:00
securityheaders_test.go
securityheaders.go
session_auth_test.go
session_auth.go
tenant_guard_test.go	fix(tenant-guard): allowlist /buildinfo so redeploy verifier can reach it	2026-04-30 12:54:51 -07:00
tenant_guard.go	fix(tenant-guard): allowlist /buildinfo so redeploy verifier can reach it	2026-04-30 12:54:51 -07:00
wsauth_middleware_canvasorbearer_test.go
wsauth_middleware_org_id_test.go
wsauth_middleware_test.go
wsauth_middleware.go