рабочий вариант, но скороть 10 МБит
build / backend (push) Has been cancelled
build / node-agent (push) Has been cancelled
build / worker (push) Has been cancelled

This commit is contained in:
2026-05-22 21:46:49 +03:00
parent 469fa0e860
commit 20d361a886
280 changed files with 954890 additions and 18524 deletions
+2 -2
View File
@@ -202,9 +202,9 @@ Current authoritative audit:
- `docs/audits/PROJECT_AUDIT_2026-04-26.md`
Legacy warning:
Archive warning:
- `docs/_legacy_v1` is historical reference only and must not be used for
- archived `docs/_archive_v1` is historical reference only and must not be used for
implementation decisions
## Correct Next Step
+3 -3
View File
@@ -303,7 +303,7 @@ Known worker/RDP gaps:
At the start of this audit these files were stale or partly stale:
- `README.md` still points to old legacy docs and says not to start with UI,
- `README.md` still points to old compat-era docs and says not to start with UI,
while the Windows client already exists
- `docs/codex/CURRENT_STATUS.md` says WebSocket takeover proof is still a gap,
even though that proof was later closed
@@ -434,7 +434,7 @@ Do not:
Acceptance:
- a new engineer/Codex can read the docs and know the actual next step
- no doc points to legacy v1 or already-completed stages as next work
- no doc points to archived v1 or already-completed stages as next work
### P1. RDP Visual Correctness Hardening
@@ -505,7 +505,7 @@ Completed:
`docs/architecture/SECURITY_SECRETS_READINESS.md`
- production mode rejects plaintext credential-like resource metadata
- production RDP/VNC/SSH resources require `secret_ref`
- session start rejects legacy plaintext resources in production mode
- session start rejects compat plaintext resources in production mode
- data-plane allowed-channel policy test exists
- worker direct-bind denial probes cover wrong worker/user/org/resource,
wrong attachment, over-broad channels, and failed/terminated states