fix(clearfolio): fail closed on provider redirects and unreviewed hosts - #536

Closed

cursor[bot] wants to merge 22 commits into

cursor/bc-b1c7e1f9-abca-4c2c-98bd-c04e9bb18572-3e4e

Commits on Aug 14, 2026

fix(clearfolio): fail closed when production is unconfigured
seonghobae
committed
338b3cc
test(clearfolio): prove explicit development and production config boundaries
seonghobae
committed
9f223d9
test(clearfolio): enforce signed production and token-origin boundaries
seonghobae
committed
6f9985c
fix(clearfolio): bind viewer tokens to their returned origin
seonghobae
committed
d330ff6
test(clearfolio): make attachment mock mode explicit
seonghobae
committed
4721551
docs(deploy): make Clearfolio production readiness explicit
seonghobae
committed
4632000
docs(doctoring): record Clearfolio fail-closed configuration evidence
seonghobae
committed
45808bf
docs(changelog): record Clearfolio production config boundary
seonghobae
committed
3facf19
test(clearfolio): cover malformed provider origins
seonghobae
committed
928782c
test(clearfolio): cover same-origin viewer token translation
seonghobae
committed
3eecbde
test(clearfolio): require 32 non-whitespace HMAC characters
seonghobae
committed
90bd672
test(clearfolio): prove internal whitespace cannot satisfy secret length
seonghobae
committed
e46dd51
fix(clearfolio): count only non-whitespace secret characters
seonghobae
committed
c8da068
test(clearfolio): cover IPv6 loopback development URL
seonghobae
committed
516429f
fix(clearfolio): recognize IPv6 loopback URL hostname
seonghobae
committed
5062a8d

Commits on Aug 16, 2026