rcourtman 524f42cc28 security: complete Phase 1 sensor proxy hardening ...

Implements comprehensive security hardening for pulse-sensor-proxy:
- Privilege drop from root to unprivileged user (UID 995)
- Hash-chained tamper-evident audit logging with remote forwarding
- Per-UID rate limiting (0.2 QPS, burst 2) with concurrency caps
- Enhanced command validation with 10+ attack pattern tests
- Fuzz testing (7M+ executions, 0 crashes)
- SSH hardening, AppArmor/seccomp profiles, operational runbooks

All 27 Phase 1 tasks complete. Ready for production deployment.

2025-10-20 15:13:37 +00:00

..

development

feat: streamline docker agent onboarding

2025-10-14 09:45:32 +00:00

images

Fix settings security tab navigation

2025-10-11 23:29:47 +00:00

operations

security: complete Phase 1 sensor proxy hardening

2025-10-20 15:13:37 +00:00

security

security: complete Phase 1 sensor proxy hardening

2025-10-20 15:13:37 +00:00

API.md

Add guest agent caching and update doc hints (refs #560)

2025-10-16 08:15:49 +00:00

CONFIGURATION.md

Add configurable backup polling interval

2025-10-18 13:06:41 +00:00

DOCKER_HUB_README.md

Adopt multi-token auth across docs, UI, and tooling

2025-10-14 15:47:49 +00:00

DOCKER_MONITORING.md

feat: enhance alerts system with tests and improved thresholds

2025-10-15 22:25:04 +00:00

DOCKER.md

Adopt multi-token auth across docs, UI, and tooling

2025-10-14 15:47:49 +00:00

FAQ.md

Adopt multi-token auth across docs, UI, and tooling

2025-10-14 15:47:49 +00:00

frontend-style-guide.md

Fix settings security tab navigation

2025-10-11 23:29:47 +00:00

INSTALL.md

Add Helm chart tooling, CI, and release packaging

2025-10-18 11:50:57 +00:00

KUBERNETES.md

Add Helm chart tooling, CI, and release packaging

2025-10-18 11:50:57 +00:00

MIGRATION.md

Fix settings security tab navigation

2025-10-11 23:29:47 +00:00

OIDC.md

Fix settings security tab navigation

2025-10-11 23:29:47 +00:00

PHASE1_SUMMARY.md

security: complete Phase 1 sensor proxy hardening

2025-10-20 15:13:37 +00:00

PORT_CONFIGURATION.md

Add guest agent caching and update doc hints (refs #560)

2025-10-16 08:15:49 +00:00

PROXY_AUTH.md

Adopt multi-token auth across docs, UI, and tooling

2025-10-14 15:47:49 +00:00

PULSE_SENSOR_PROXY_HARDENING.md

Add guest agent caching and update doc hints (refs #560)

2025-10-16 08:15:49 +00:00

RELEASE.md

Add Helm chart tooling, CI, and release packaging

2025-10-18 11:50:57 +00:00

REVERSE_PROXY.md

Add guest agent caching and update doc hints (refs #560)

2025-10-16 08:15:49 +00:00

SCREENSHOTS.md

Fix settings security tab navigation

2025-10-11 23:29:47 +00:00

SECURITY.md

Add guest agent caching and update doc hints (refs #560)

2025-10-16 08:15:49 +00:00

TEMPERATURE_MONITORING_SECURITY.md

test: add comprehensive security tests and documentation

2025-10-19 16:47:13 +00:00

TEMPERATURE_MONITORING.md

fix: gracefully handle standalone node cleanup limitation

2025-10-18 07:34:18 +00:00

TROUBLESHOOTING.md

Add guest agent caching and update doc hints (refs #560)

2025-10-16 08:15:49 +00:00

VM_DISK_MONITORING.md

Ignore read-only guest filesystems in disk aggregation

2025-10-14 16:13:53 +00:00

WEBHOOKS.md

feat: add docker agent command handling

2025-10-15 19:27:19 +00:00

zfs-monitoring.md

Add guest agent caching and update doc hints (refs #560)

2025-10-16 08:15:49 +00:00