nexxo 2b70c9226a fix(traffic): release the throttle at month end; close the Livewire bypass ... Two from Codex: - A throttled instance kept its NIC limit into the new month: the new period row starts unthrottled, so neither branch of enforce() fired and nothing ever took the limit off. A customer would have stayed slow through a month they had already paid for. - PublicSiteGate exempted livewire/* wholesale. That endpoint is shared by the console and the portal, so a signed-in customer could keep driving portal components — billing included — while the portal was supposed to be offline. Operators pass the normal check anyway, which is all the console needed. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 23:36:38 +02:00
..
EnsureAdmin.php	fix(admin): remove is_admin self-heal — RBAC is the only console boundary (no revocation bypass)	2026-07-25 18:35:14 +02:00
EnsureCustomerActive.php	feat(admin): staff RBAC (spatie) + admin settings page	2026-07-25 15:47:42 +02:00
PublicSiteGate.php	fix(traffic): release the throttle at month end; close the Livewire bypass	2026-07-25 23:36:38 +02:00
RestrictAdminHost.php	fix(security): match ADMIN_HOSTS case-insensitively; share test helpers	2026-07-25 20:56:26 +02:00