4Ventures
9d1609c88b
docs: note JWT rotation ready but blocked on supabase compose
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-21 18:47:08 +02:00
4Ventures
5d448c0e71
ops: apply Traefik office allowlist for git and n8n UIs
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-21 18:20:25 +02:00
4Ventures
73b3693eeb
docs: record agent_runs RLS fix and Traefik IP candidate
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-21 18:16:44 +02:00
4Ventures
8315a8098f
fix: stop baking Supabase anon key into the Docker image
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-21 18:07:04 +02:00
4Ventures
3c741fa457
docs: refresh operator runbook and creatives copy after prod cutover
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-21 17:46:43 +02:00
4Ventures
6e3d561f4b
feat: operator docs, Gitea push guide, and creatives API scaffold
...
Unblock ops with marketing@ provisioning steps and start multi-tenant creatives against Supabase RLS.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-21 12:12:57 +02:00
4Ventures
2df3fe6983
fix(security): harden auth, tenant scoping, and scrub secrets
...
Require session on APIs, scope KPIs/activos/simulate to the user tenant, strip real JWTs from .env.example, and add health/smoke/docs for 4Ventures ops.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-21 10:51:46 +02:00