fix: feature_code in usage_alert_history not constrained to entitlement_features
perf: add composite index on user_workspace(workspace_id, role)
fix: namespaces.workspace_id should cascade on workspace delete
security: WorkspaceInvitation::findByToken has O(n) timing attack surface
fix: remove hardcoded domain hub.host.uk.com from WorkspaceController
fix: remove hardcoded domain hub.host.uk.com from EntitlementApiController
refactor: consolidate User model external relationships
refactor: clarify WorkspaceScope vs BelongsToWorkspace architecture
phase 0: environment assessment + test baseline
Phase 0 Assessment Complete
Branch: feat/phase-0-assessment
docs(phase-0): environment assessment, architecture review, and findings
security: validate JSON metadata fields to prevent mass assignment
fix(security): improve TeapotController header sanitization
Clotho
created branch security/improve-teapot-sanitization in core/php-admin
2026-02-20 11:50:21 +00:00
security: add rate limiting to admin action endpoints
Clotho
created branch security/rate-limit-admin-actions in core/php-admin
2026-02-20 11:28:59 +00:00