patrick and Claude Sonnet 5.5
de90c3d935
archive: gemeinsame Pakete aus common v0.1.0 statt interner Kopien
...
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
Archive-Schnittstellen-Vertragstests / contract-tests (push) Successful in 8m26s
CI / Core-Modul (Build/Vet/Test) (push) Failing after 1m1s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Successful in 6s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Successful in 5s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Failing after 20s
CI / Web (shl) (push) Failing after 13s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Failing after 33s
CI / Web (dms-browser) (push) Failing after 1m40s
CI / Web (pdf-viewer) (push) Failing after 1m4s
Supply-Chain-Scan (Go) / govulncheck (push) Failing after 2m41s
Archive-Schnittstellen-Vertragstests / contract-tests (pull_request) Successful in 3m7s
Archive-Pflichttest-Gate / pflichttest-gate (pull_request) Failing after 2m57s
CI / Core-Modul (Build/Vet/Test) (pull_request) Failing after 1m5s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Successful in 4s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Successful in 4s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Failing after 26s
CI / Web (dms-browser) (pull_request) Failing after 1m43s
CI / Web (pdf-viewer) (pull_request) Failing after 1m9s
CI / Web (shl) (pull_request) Failing after 13s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Successful in 2m42s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Failing after 3m11s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Failing after 2m1s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Successful in 2m41s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Successful in 2m39s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Failing after 3s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Failing after 3s
DB-Integrationstests / db-tests (pull_request) Canceled after 0s
apierror, auditclient, httpclient, httpharden, svcauth und tenantregistryclient
kommen aus gitea.perlbach24.de/scripte/nexarch/common. Der Wächtertest gegen
http.DefaultClient liegt jetzt in internal/archtest.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-27 23:19:13 +01:00
patrick
e5516ee213
Merge remote-tracking branch 'origin/feature/qa-15-phase2b-sicherheitsbehebung' into integration/gesamtprojekt
2026-09-22 02:50:47 +02:00
patrick and Claude Sonnet 5
f6ca199261
QA-15 F-08/F-23: Archive /register mit Dienstauthentifizierung und callback_url-Pruefung, Service-Token verpflichtend
...
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
Archive-Schnittstellen-Vertragstests / contract-tests (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com >
2026-09-22 01:07:18 +02:00
patrick and Claude Sonnet 5
c5fddad8a5
API-17: gehaertete HTTP-Server (Timeouts, Body-Limit) in allen Diensten (QA-15 F-05)
...
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com >
2026-09-22 00:49:27 +02:00
patrick and Claude Sonnet 5
cc74970930
RET-13: legal-hold-abfrage-endpunkt
...
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
GET /legal-hold in moduleadapter-api (legalholdapi), DMS-Register sendet tenant_slug, Vertragstest scripts/legalhold-contract-test.sh
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com >
2026-09-21 22:34:24 +02:00
patrick and Claude Sonnet 5
e7f5eed8bd
RET-12: unabhaengige Tenant-Validierung bei Objekttyp-Registrierung durch DMS/Mail
...
RegisterHandler prueft den mitgelieferten tenant_slug jetzt ueber einen
TenantVerifier (Core TEN-01) unabhaengig gegen die Core-Tenant-Registry,
bevor eine Registrierung uebernommen wird - statt der Angabe von DMS/
Mail blind zu vertrauen. Unbekannter/fehlerhafter Tenant-Kontext wird
abgelehnt (403) und protokolliert; ein Verifikationsfehler selbst fuehrt
fail-closed zur Ablehnung (503), nie zur stillschweigenden Annahme.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_01QPsyieCYwvbUBsnN598SbP
2026-09-17 15:09:08 +02:00
sysops
eddb6da4a6
RET-09: modul-adapter-dienst-starten
...
- archive/cmd/moduleadapter-api: startet den fertigen RET-05
RegisterHandler als eigenstaendigen HTTP-Dienst, Port 8095
- reines Wiring, kein Diff an internal/moduleadapter/ (verifiziert)
- real deployed auf 131, end-zu-ende per curl: Registrierung +
Idempotenz-Nachweis (widerspruechliche zweite Werte werden ignoriert,
urspruengliche Registrierung bleibt bestehen)
Pruefungen siehe archive/docs/RET-09-PRUEFPROTOKOLL.md
2026-08-30 09:27:51 +02:00
patrickandClaude Sonnet 5.5