Research-grade evidence, bounded chat storage, and blocking quality gates#27

Merged

CoreyLeath-code merged 34 commits into

mainfrom

agent/research-evidence-hardening

Jul 18, 2026

Commits on Jul 18, 2026

Harden backend/services/chat_service.py
CoreyLeath-code
committed
Harden backend/routes/chat_routes.py
CoreyLeath-code
committed
Harden backend/api.py
CoreyLeath-code
committed
Harden backend/config.py
CoreyLeath-code
committed
Harden app/core/security.py
CoreyLeath-code
committed
Harden requirements.txt
CoreyLeath-code
committed
Harden .github/workflows/trojanchat-hygiene.yml
CoreyLeath-code
committed
Harden .github/workflows/benchmarks.yml
CoreyLeath-code
committed
Harden .github/workflows/security-supply-chain.yml
CoreyLeath-code
committed
Add .github/workflows/codeql.yml
CoreyLeath-code
committed
Add tests/test_backend_hardening.py
CoreyLeath-code
committed
Add tests/test_benchmark.py
CoreyLeath-code
committed
Add tests/test_security.py
CoreyLeath-code
committed
Add benchmarks/run_benchmark.py
CoreyLeath-code
committed
Add benchmarks/latest.json
CoreyLeath-code
committed
Add benchmarks/benchmark_report.md
CoreyLeath-code
committed
Add docs/AUDIT.md
CoreyLeath-code
committed
Add docs/PRODUCTION_CHECKLIST.md
CoreyLeath-code
committed
Harden README.md
CoreyLeath-code
committed
Harden CHANGELOG.MD
CoreyLeath-code
committed
Expand README research metrics and benchmark dashboard
CoreyLeath-code
committed
Document CodeQL default setup in README.md
CoreyLeath-code
committed
Document CodeQL default setup in docs/AUDIT.md
CoreyLeath-code
committed
Document CodeQL default setup in CHANGELOG.MD
CoreyLeath-code
committed
Remove CodeQL workflow conflicting with default setup
CoreyLeath-code
committed
Fix frontend security gate in frontend/package.json
CoreyLeath-code
committed
Fix frontend security gate in frontend/package-lock.json
CoreyLeath-code
committed
Fix frontend security gate in .github/workflows/trojanchat-hygiene.yml
CoreyLeath-code
committed
Fix frontend security gate in CHANGELOG.MD
CoreyLeath-code
committed
Fix frontend security gate in docs/AUDIT.md
CoreyLeath-code
committed
Resolve Trivy findings in .github/workflows/security-supply-chain.yml
CoreyLeath-code
committed
Resolve Trivy findings in Dockerfile
CoreyLeath-code
committed
Resolve Trivy findings in CHANGELOG.MD
CoreyLeath-code
committed
Remove vulnerable build tooling from runtime image
CoreyLeath-code
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Research-grade evidence, bounded chat storage, and blocking quality gates#27

Research-grade evidence, bounded chat storage, and blocking quality gates#27
CoreyLeath-code merged 34 commits into
mainfrom
agent/research-evidence-hardening

Commits on Jul 18, 2026

Harden backend/services/chat_service.py

Harden backend/routes/chat_routes.py

Harden backend/api.py

Harden backend/config.py

Harden app/core/security.py

Harden requirements.txt

Harden .github/workflows/trojanchat-hygiene.yml

Harden .github/workflows/benchmarks.yml

Harden .github/workflows/security-supply-chain.yml

Add .github/workflows/codeql.yml

Add tests/test_backend_hardening.py

Add tests/test_benchmark.py

Add tests/test_security.py

Add benchmarks/run_benchmark.py

Add benchmarks/latest.json

Add benchmarks/benchmark_report.md

Add docs/AUDIT.md

Add docs/PRODUCTION_CHECKLIST.md

Harden README.md

Harden CHANGELOG.MD

Expand README research metrics and benchmark dashboard

Document CodeQL default setup in README.md

Document CodeQL default setup in docs/AUDIT.md

Document CodeQL default setup in CHANGELOG.MD

Remove CodeQL workflow conflicting with default setup

Fix frontend security gate in frontend/package.json

Fix frontend security gate in frontend/package-lock.json

Fix frontend security gate in .github/workflows/trojanchat-hygiene.yml

Fix frontend security gate in CHANGELOG.MD

Fix frontend security gate in docs/AUDIT.md

Resolve Trivy findings in .github/workflows/security-supply-chain.yml

Resolve Trivy findings in Dockerfile

Resolve Trivy findings in CHANGELOG.MD

Remove vulnerable build tooling from runtime image