Dorian 6335ea17ee feat: Phase 4 backend hardening — container reliability + security audit ...

Container Management (CONT-01 through CONT-06):
- Fix needs_archy_net: add lnd, nbxplorer to archy-net list
- Add StartupTier dependency ordering to health monitor (DB→Core→Dependent→App→UI)
- Add exponential backoff (10s/30s/90s) with 1hr stability reset
- Add get_health_check_args() with health checks for 20+ apps
- Add get_memory_limit() with per-app limits (128m-4g vs blanket 2g)
- Create docs/network-topology.md
- Fix fedimint containers on both nodes (moved to archy-net)

Security Audit (SEC-01 through SEC-06):
- Add sanitize_error_message() — strips internal paths from RPC errors
- Add validate_identity_id() — blocks path traversal on identity operations
- Add validate_did() — blocks path traversal on federation operations
- Add message size limits: node-send-message (1MB), dwn.write-message (10MB)
- Add rate limits for federation endpoints (join: 5/60s, invite: 10/300s)
- Configure journald (500MB max, 7 day retention) on both nodes
- Add /etc/logrotate.d/archipelago for backend + crowdsec logs
- Verify all 4 nginx security headers on both nodes

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-14 02:45:28 +00:00

..

adr

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

ai-quarantine-architecture.html

feat: add TOTP 2FA, API key switcher, login progress bar, and alpha hardening plan

2026-03-06 12:23:57 +00:00

api-reference.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

app-developer-guide.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

app-manifest-spec.md

Initial commit

2026-01-24 22:01:51 +00:00

architecture.md

Update .gitignore and remove obsolete documentation files

2026-02-01 02:22:02 +00:00

arm64-build.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

arm64-container-images.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

arm64-rpi5-testing.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

BETA-RELEASE-CHECKLIST.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

BITCOIN-KNOTS-BETA.md

Revise BUILD-GUIDE and enhance ISO build process

2026-02-03 21:43:33 +00:00

building-os-images.md

Update .gitignore and remove obsolete documentation files

2026-02-01 02:22:02 +00:00

canary-deploy.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

community-app-review-checklist.md

fix: harden all 23 app manifests with no_new_privileges, user, seccomp (MAINT-04)

2026-03-11 18:13:28 +00:00

current-state.md

mid coding commit

2026-01-24 22:59:20 +00:00

dependency-audit-log.md

chore: run monthly dependency update cycle (MAINT-01)

2026-03-11 18:00:02 +00:00

developer-guide.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

development-containers.md

mid coding commit

2026-01-24 22:59:20 +00:00

development-setup.md

mid coding commit

2026-01-24 22:59:20 +00:00

DID_ONBOARDING_ASSESSMENT.md

Implement onboarding reset functionality and enhance backup features

2026-03-02 08:34:13 +00:00

hardware-regression-v1.0.md

chore: resolve remaining plan items — hardware test, superseded milestones

2026-03-11 18:27:15 +00:00

hardware-wallet-integration.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

hotfix-process.md

docs: set up post-release monitoring and hotfix process (LAUNCH-02)

2026-03-11 18:24:56 +00:00

marketplace-protocol.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

multi-node-architecture.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

network-topology.md

feat: Phase 4 backend hardening — container reliability + security audit

2026-03-14 02:45:28 +00:00

PACKAGE-INSTALLATION-SECURITY.md

Enhance README and RPC for package management

2026-02-01 18:46:35 +00:00

quality-baseline.md

chore: quarterly quality sweep — zero regressions, 515 tests pass (MAINT-03)

2026-03-11 18:10:45 +00:00

release-process.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

roadmap-v1.1.md

docs: create v1.1 roadmap with bug fixes, marketplace expansion, UX improvements (LAUNCH-03)

2026-03-11 17:54:30 +00:00

roadmap-v2.0.md

docs: plan v2.0 features — multi-chain, mesh, mobile, AI, plugins (MAINT-05)

2026-03-11 18:14:33 +00:00

security-audit-2026-03-05.md

docs: add security audit report for new features (Task 22)

2026-03-05 08:49:22 +00:00

security-audit-2026-03-11.md

fix: monthly security scan — fix shell injection and add RPC body limit (MAINT-02)

2026-03-11 18:09:16 +00:00

SECURITY-NOSTR-DISCOVERY.md

Update Fedimint configuration and enhance onboarding process

2026-02-17 15:03:34 +00:00

startos-dependency-audit.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

TAILSCALE-INTEGRATION.md

Enhance README and RPC for package management

2026-02-01 18:46:35 +00:00

three-mode-ui-design.md

feat: complete Phase 1 foundation hardening + three-mode UI design doc

2026-03-04 05:23:42 +00:00

troubleshooting.md

docs: add comprehensive troubleshooting guide (FINALDOC-01)

2026-03-11 17:20:21 +00:00

USER-GUIDE-TAILSCALE.md

Enhance README and RPC for package management

2026-02-01 18:46:35 +00:00

user-guide.md

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00

user-walkthrough.md

docs: add user walkthrough with screenshot placeholders (FINALDOC-02)

2026-03-11 17:21:40 +00:00

ux-audit-2026-03.md

docs: complete UX audit of all 12 pages

2026-03-11 10:13:36 +00:00

WEB5_NOSTR_IDENTITY.md

Update Fedimint configuration and enhance onboarding process

2026-02-17 15:03:34 +00:00