4 Commits

Author	SHA1	Message	Date
shinchan-zhai	f1394d779a	docs: update nofxi-tasks.md — record complete panic recovery coverage	2026-03-25 01:05:54 +08:00
shinchan-zhai	e671268763	docs: update nofxi-tasks.md — record 10:07 batch progress	2026-03-25 01:05:54 +08:00
shinchan-zhai	edeac8a0d2	docs: update nofxi-tasks.md — mark completed, clean false positives	2026-03-25 01:05:54 +08:00
shinchan-zhai	6acf925a0b	security: configurable CORS origins, limit sentinel response body ... - Add CORS_ALLOWED_ORIGINS config (comma-separated origins, default allow-all) - CORS middleware now validates Origin header against allowlist - Add io.LimitReader to sentinel.go (was unbounded, now 256KB) - Include previous: agent chat auth middleware + frontend token header	2026-03-25 01:05:54 +08:00