nexxo 04ba9dd2a9 fix(vpn): an open modal stops serving the config once access is revoked ... Once revealed, the plaintext sits in the handoff cache for ten minutes, and the modal read it from the token alone. A former owner could keep pulling the key out of an open modal after revocation — the exact window purgeSecret() exists to close. Every request now re-checks the policy and drops the handoff when it no longer holds. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>		2026-07-25 22:39:30 +02:00
..
Feature	fix(vpn): an open modal stops serving the config once access is revoked	2026-07-25 22:39:30 +02:00
Support/Steps	feat(engine-b): CustomerStep base + shared resource trait + config	2026-07-25 11:39:56 +02:00
Unit	feat(engine): orchestrator core (state machine + tick + lock)	2026-07-25 09:54:52 +02:00
Pest.php	fix(security): match ADMIN_HOSTS case-insensitively; share test helpers	2026-07-25 20:56:26 +02:00
TestCase.php	chore: bootstrap CluPilot control-plane (Laravel 13, Docker stack)	2026-07-25 00:21:30 +02:00