4 Commits

Author	SHA1	Message	Date
4Ventures	9d1609c88b	docs: note JWT rotation ready but blocked on supabase compose ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-21 18:47:08 +02:00
4Ventures	5d448c0e71	ops: apply Traefik office allowlist for git and n8n UIs ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-21 18:20:25 +02:00
4Ventures	8315a8098f	fix: stop baking Supabase anon key into the Docker image ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-21 18:07:04 +02:00
4Ventures	2df3fe6983	fix(security): harden auth, tenant scoping, and scrub secrets ... Require session on APIs, scope KPIs/activos/simulate to the user tenant, strip real JWTs from .env.example, and add health/smoke/docs for 4Ventures ops. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-21 10:51:46 +02:00