Repository navigation

feat(security): add clerk security audit, fix, and checks - #478

Open

dominic-clerk wants to merge 14 commits into

mainfrom

dc/security-recommendations

Commits on Sep 23, 2026
- feat(security): add clerk security audit, fix, and checks
  
  dominic-clerk
  and
  claude
  committed
  c32c0a8
- fix(security): address review: device-trust id, unknown lockout threshold, unowned instance, variadic completion, e2e guards
  
  dominic-clerk
  and
  claude
  committed
  d1d016b
- docs(security): drop the catalog provenance note
  
  dominic-clerk
  and
  claude
  committed
  d964364
- docs(security): backup codes alone do not satisfy mfa
  
  dominic-clerk
  and
  claude
  committed
  f71019e
- docs(security): describe what fix --all applies instead of claiming no user impact
  
  dominic-clerk
  and
  claude
  committed
  693fa82
- feat(security): name the plan-gated checks when production rejects a fix
  
  dominic-clerk
  and
  claude
  committed
  f778c17
- feat(security): drop --fail-on, --spotlight, and --check
  
  dominic-clerk
  and
  claude
  committed
  c666925
- fix(security): drop --spotlight from the post-fix next step
  
  dominic-clerk
  and
  claude
  committed
  50fc5f0
- refactor(security): unexport module-private helpers
  
  dominic-clerk
  and
  claude
  committed
  3532b6e
- feat(security): warn what custom flows must handle before applying a fix
  
  dominic-clerk
  and
  claude
  committed
  9b42006
- docs(changeset): shorten the security entry
  
  dominic-clerk
  and
  claude
  committed
  c151357
- refactor(security): drop suggestedPatch and raw values, one fix-command builder
  
  dominic-clerk
  and
  claude
  committed
  8da4bb0
- fix(security): close fix selections and plan retries over the projection
  
  dominic-clerk
  and
  claude
  committed
  61cf402
- fix(security): make the passwordless fix safe on its own
  
  dominic-clerk
  and
  claude
  committed
  f41bb52

Navigation Menu

Repository navigation

feat(security): add clerk security audit, fix, and checks - #478

feat(security): add clerk security audit, fix, and checks#478
dominic-clerk wants to merge 14 commits into
mainfrom
dc/security-recommendations

Commits on Sep 23, 2026

feat(security): add clerk security audit, fix, and checks

fix(security): address review: device-trust id, unknown lockout threshold, unowned instance, variadic completion, e2e guards

docs(security): drop the catalog provenance note

docs(security): backup codes alone do not satisfy mfa

docs(security): describe what fix --all applies instead of claiming no user impact

feat(security): name the plan-gated checks when production rejects a fix

feat(security): drop --fail-on, --spotlight, and --check

fix(security): drop --spotlight from the post-fix next step

refactor(security): unexport module-private helpers

feat(security): warn what custom flows must handle before applying a fix

docs(changeset): shorten the security entry

refactor(security): drop suggestedPatch and raw values, one fix-command builder

fix(security): close fix selections and plan retries over the projection

fix(security): make the passwordless fix safe on its own