nexarch

5 Commits

Include renames

Author	SHA1	Message	Date
patrickandClaude Sonnet 5	637998a322	TEN-12: import-verzeichnisse-je-tenant-in-der-registry-fuehren CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s Details CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s Details CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s Details CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s Details CI / Web (dms-browser) (push) Canceled after 0s Details CI / Web (pdf-viewer) (push) Canceled after 0s Details CI / Web (shl) (push) Canceled after 0s Details Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s Details CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s Details Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-23 00:17:27 +02:00
patrickandClaude Sonnet 5	b52f46ca15	QA-15 Phase 2a: gofmt handler.go, Testzaehler je Pfad CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s Details CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s Details CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s Details CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s Details CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s Details CI / Web (dms-browser) (push) Canceled after 0s Details CI / Web (pdf-viewer) (push) Canceled after 0s Details CI / Web (shl) (push) Canceled after 0s Details Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s Details Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-22 00:54:03 +02:00
patrickandClaude Sonnet 5	9aa69d3801	TEN-13/LIC-07: Dienst-Token fuer interne Admin-Endpunkte, Loopback-Standard, CORS-Ursprungsliste, Proxy in den Admin-Oberflaechen (QA-15 F-01..F-03) Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-22 00:49:27 +02:00
patrickandClaude Sonnet 5	4fc361b462	TEN-09: registry-h-rtung-zugriffsschutz Supply-Chain-Scan (Go) / govulncheck (push) Failing after 41s Details Haertet die Control-Plane-Registry als eigene Schutzzone: - Dedizierte Postgres-Rolle nexarch_registry (ohne CREATEDB) fuer NEXARCH_REGISTRY_DSN, getrennt von der Provisioning-Rolle nexarch_core (deploy/install.sh). Neu angelegte Tenant-Datenbanken entziehen PUBLIC explizit das CONNECT-Recht (internal/tenant/provisioner.go), damit die Registry-Rolle unter keinen Umstaenden Zugriff auf eine Tenant-Datenbank erhaelt (Akzeptanzkriterium 1). - Auditierte Zugriffsmethoden (*AsActor) fuer Superadmin-Konten (internal/user.SuperadminStore) und Verbindungsinformationen (internal/tenant.Registry) — jeder lesende/schreibende Zugriff erzeugt einen Audit-Event mit Akteur und Zeitstempel, verdrahtet in internal/tenantadmin (TEN-05-Konsole) und cmd/core (Akzeptanzkriterium 2). - Betriebsanleitung docs/TEN-09-REGISTRY-BETRIEB.md dokumentiert Rollentrennung und den auf den Core-Dienst beschraenkten Netzwerkzugriff (pg_hba.conf, listen_addresses, Firewall-Default-Policy), abgesichert durch internal/opsdocs/registry_hardening_test.go (Akzeptanzkriterium 3). Automatisierte Tests je Akzeptanzkriterium: internal/tenant/isolation_test.go (negativer Zugriffstest), internal/audit/wiring_test.go (TestWiring_SuperadminReadIsAudited, TestWiring_RegistryConnectionInfoReadIsAudited), internal/opsdocs/registry_hardening_test.go. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01QPsyieCYwvbUBsnN598SbP	2026-09-17 01:37:40 +02:00
sysops	11ed3e3790	TEN-05: backend-api + dev-server + next.js tenant-verwaltungsoberflaeche	2026-08-27 23:58:04 +02:00