Pandore/homarr
Public Access
1
0 Fork 0
Code Actions Activity

docs: refresh Workshop audit

Browse Source
This commit is contained in:
Thomas Camlong committed 2026-07-14 01:21:53 +02:00
1 parent c6e0cb27e7
commit 8cdc4f8030
1 file changed
+2 -2
Download Patch File Download Diff File Expand all files Collapse all files
audit.md
+2 -2
View File
@@ -14,7 +14,7 @@ Workshop behavior is defined once: one typed contract, one client, versioned Poc
## Baseline audit
The abandoned prototype is preserved at `origin/feat/widget-store-prototype-backup` (`89260b875`). This rewrite is rebased onto `dev` commit `93325642a`.
The abandoned prototype is preserved at `origin/feat/widget-store-prototype-backup` (`89260b875`). This rewrite is rebased onto `dev` commit `d52d9cfed`.
| Area | Severity | Baseline finding | V2 resolution |
| ------------- | -------- | ----------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------ |
@@ -66,7 +66,7 @@ The baseline has three P0, seven P1, and one P2 findings. The rewrite closes eve
| Gate | Result | Evidence |
| --------------------------- | ------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Branch ancestry | Pass | Rebuilt from `dev` at `93325642a`; prototype preserved at `origin/feat/widget-store-prototype-backup`. |
| Branch ancestry | Pass | Rebuilt from `dev` at `d52d9cfed`; prototype preserved at `origin/feat/widget-store-prototype-backup`. |
| Contract | Pass | Five Vitest cases cover widget/CSS fixtures, filenames, limits, screenshot validation, and round trips. |
| Backend | Pass | Disposable PocketBase integration matrix covers roles, account states, ownership forgery, schema rejection, duplicate votes, private reports, escalation, deletion cascades, and audit snapshots. |
| Backend operations | Pass | PocketBase 0.39.6 runs unprivileged and builds with checksum verification; clean boot and a cloned legacy SQLite volume both migrate and become healthy. |