docs(audits): performance, security, and quality audit results#62

Merged

drernie merged 21 commits intomainfrom

Mar 25, 2026

Commits on Mar 23, 2026

Commits on Mar 24, 2026

fix(infra): add ssmmessages IAM perms + fix verify script token type

drernie
and
claude
committed
Update perf verification and audit results
drernie
committed
feat(perf): add PERF_DIRECT_BUCKET no-auth Envoy route for baseline benchmarking

drernie
and
claude
committed
fix(verify-perf): derive perf_bucket from perf_uri when PERF_DIRECT_BUCKET unset

drernie
and
claude
committed
fix(perf-direct): use /_perf/ prefix + signed s3_perf_upstream cluster

drernie
and
claude
committed
fix(perf-direct): restore s3_perf_upstream signed cluster; fix direct check URL

drernie
and
claude
committed
fix(spec): correct /_perf/ path description and token_type to rajee

drernie
and
claude
committed
Align perf verifier with benchmark spec
drernie
committed
Use real file paths for performance audit
drernie
committed
chore(spec): remove superseded 03a-e drafts

drernie
and
claude
committed
docs(audits): add 04-audit-summary with final perf results

drernie
and
claude
committed
Bump version to 1.3.2
drernie
committed
docs(changelog): add 1.3.2 entry for performance audit results

drernie
and
claude
committed
fix(security): strip client x-raja-jwt-payload header at Envoy virtual host

drernie
and
claude
committed