boban 72de7b9a22 fix(rbac,honeypot): gate audit-retention + email sendTest; honeytoken scans JSON body ... Re-review (completeness sweep + Codex) found: Audit\Index::saveRetention wrote the global audit_retention_days policy ungated (a non-admin could shrink retention and prune audit evidence) -> manage-panel guard + @can-hidden control; Settings\Email::sendTest lacked the role guard that mount/save already had -> manage-panel; DetectHoneytoken read only form-encoded bodies via post(), missing a JSON {"api_key":"<canary>"} replay -> now scans json() too (still body-only, no query).		2026-07-05 02:28:13 +02:00
..
.gitkeep	feat: scaffold — Dockerized Laravel 13 + Livewire 3 + Tailwind 4 + Reverb	2026-06-12 00:31:50 +02:00
Index.php	fix(rbac,honeypot): gate audit-retention + email sendTest; honeytoken scans JSON body	2026-07-05 02:28:13 +02:00