boban 6290cec6ab fix(2fa): bound the backup-code reveal flag with a 10-minute TTL ... The 2fa.codes_fresh reveal flag is now a timestamp (set at enrollment) and RecoveryCodes::mount() only reveals within [now-600s, now], symmetric to the download-grant window. A reveal flag whose modal never opened can no longer re-reveal the codes later in the session. FirstFactorCodesTest asserts the flag is an int. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-15 18:42:58 +02:00
..
superpowers	fix(2fa): bound the backup-code reveal flag with a 10-minute TTL	2026-06-15 18:42:58 +02:00
install-update-design.md	feat: v1 dashboard UI — app shell + component kit + mock fleet	2026-06-12 01:10:23 +02:00
session-handoff.md	chore(release): v0.6.0	2026-06-14 18:50:07 +02:00
v1-ui-review.md	fix: apply v1 UI review (a11y, contrast, live-chart robustness)	2026-06-12 06:16:52 +02:00