Remediate TransTrack validation findings (C/H/M) - #229

Merged

NeuroKoder3 merged 41 commits into

mainfrom

cursor/remediate-validation-findings-bbb1

Aug 3, 2026

Commits on Aug 2, 2026

fix(fhir): enforce SMART patient-compartment isolation at the storage boundary

cursoragent
and
NeuroKoder3
committed
cc4c8d0
fix(clinical): enforce clinical validation at every persistence boundary

cursoragent
and
NeuroKoder3
committed
d4f3f5e
fix(server): harden deployment configuration and stop leaking internals

cursoragent
and
NeuroKoder3
committed
bea21bd
fix(hl7): scope the HL7 tables to their tenant and bound the MLLP listener

cursoragent
and
NeuroKoder3
committed
d512198
fix(cds): store a PHI-free invocation summary and authorise the hook

cursoragent
and
NeuroKoder3
committed
7569684
fix(auth): make login tenant-unambiguous and scope lockout to one account

cursoragent
and
NeuroKoder3
committed
5dcfcd1
fix(smart): bind launch context server-side, sign ID tokens asymmetrically

cursoragent
and
NeuroKoder3
committed
dd85f72
fix(server): validate calculator and patient request bodies explicitly

cursoragent
and
NeuroKoder3
committed
e2ad2a6
Audit trail: single fail-closed chained writer and monotonic sequence

cursoragent
and
NeuroKoder3
committed
1403404
Database: prove encryption at rest, fail closed, and evidence break-glass

cursoragent
and
NeuroKoder3
committed
158507e
Services: redact PHI at the sink, pseudonymise workforce identifiers, gate PHI exports

cursoragent
and
NeuroKoder3
committed
a1c11c3
IPC: justify bulk PHI reads, enforce RBAC, confine paths, harden preload

cursoragent
and
NeuroKoder3
committed
cba5e50
fix(clinical): source-trace every calculator constant and fail closed on gaps

cursoragent
and
NeuroKoder3
committed
45530e6
L-9: move Node suite scratch dirs to os.tmpdir() with guaranteed cleanup

cursoragent
and
NeuroKoder3
committed
f37ec98
M-19: collapse to one vulnerability allowlist with expiry enforcement

cursoragent
and
NeuroKoder3
committed
2f706f5
M-20: make signing mandatory by default in the release gate

cursoragent
and
NeuroKoder3
committed
b808847
H-8: unbreak the suite runner - drop a suite entry that never existed

cursoragent
and
NeuroKoder3
committed
ec228c7
H-8: cover the renderer's data-access layer and shared helpers

cursoragent
and
NeuroKoder3
committed
16aed59
H-8: measure and cover the five IPC-bound PHI pages

cursoragent
and
NeuroKoder3
committed
ca8fc30
docs(compliance): produce an executed validation package for 1.3.0 (C-2)

cursoragent
and
NeuroKoder3
committed
774e81d
docs(compliance): correct traceability matrix citations to files that exist (I-7, M-17)

cursoragent
and
NeuroKoder3
committed
a638a4b
docs: make marketing, compliance and technical documents describe the shipped system (M-17)

cursoragent
and
NeuroKoder3
committed
d3b956d
docs(security): define a role-based disclosure channel with an SLA and escalation path (L-13, M-17)

cursoragent
and
NeuroKoder3
committed
8c77a4e
docs: turn RUNBOOK.md into a real operational runbook (I-5)

cursoragent
and
NeuroKoder3
committed
fe16684
docs: record the provenance of sample and demonstration data (I-8)

cursoragent
and
NeuroKoder3
committed
64a6510
docs(legal): remove commercial material from the product repository (L-12)

cursoragent
and
NeuroKoder3
committed
acfe692
build: add CODEOWNERS and document required branch protection (L-16)

cursoragent
and
NeuroKoder3
committed
9919ffa
docs: record the validation-finding remediation in the changelog

cursoragent
and
NeuroKoder3
committed
d517791
H-8: cover the session controls - auth context and idle logoff

cursoragent
and
NeuroKoder3
committed
10b01a3
M-18: make the supply-chain gates able to fail

cursoragent
and
NeuroKoder3
committed
e62f40e
H-8: cover the forced security gates, the roster import and the PHI panels

cursoragent
and
NeuroKoder3
committed
f0a9872
H-8: enforce a real coverage gate and make every CI job blocking

cursoragent
and
NeuroKoder3
committed
78e84c8
M-23: execute the password, session and lockout controls instead of grepping for them

cursoragent
and
NeuroKoder3
committed
3116a1b
M-18: run the vulnerability scan on the weekly schedule too

cursoragent
and
NeuroKoder3
committed
4fe74f6
M-23: fail the e2e job on a committed test.only

cursoragent
and
NeuroKoder3
committed
ed522ea
test(fhir): cover transaction-bundle scope enforcement at the route level (H-4, M-28)

cursoragent
and
NeuroKoder3
committed
14a9198
fix(H-1,H-13): renderer PHI access gate, cache purge, idle timeout

cursoragent
and
NeuroKoder3
committed
c630c1a
fix(H-6,H-7,H-14,M-21,M-24): restore licensing gates and API parity

cursoragent
and
NeuroKoder3
committed
bd050e0
fix(lint): use strict equality in license nullish checks

NeuroKoder3
and
cursoragent
committed
4babe11
fix(e2e): clear security gates on form-login session

NeuroKoder3
and
cursoragent
committed
9f5cf85

Commits on Aug 3, 2026

fix(ci): report required build commit status

NeuroKoder3
and
cursoragent
committed
800f6c1