Jon Chery 19b52f6c9b fix(P24): known_hosts tightening + transport hardening (REQ-139, F15, F25) ...

---ci---
project: orca
phase: 24
milestone: v0.12
status: execute
---/ci---

Flock now chmod's the file to 0600 after open (tightens pre-existing
looser perms; O_CREATE only sets mode on creation). REQ-139/F15.
classifyDialErr + SSH-exec rate limiting documented as v1.x follow-up
(the transport is deprecated; SSH-push is the primary). Build green.

2026-08-07 11:32:25 +00:00

..

testdata

docs(milestone): complete scheduling-streaming (v0.3)

2026-08-01 20:06:47 +00:00

ca.go

fix(P15): file-mode audit expansion (REQ-130, F13)

2026-08-07 11:25:02 +00:00

certgen_test.go

feat(P08): CA, CSR, fingerprint, rotation, redact, TLS config + cert repo

2026-06-03 21:18:50 +00:00

csr.go

feat(P00): deprecation sweep + bash tooling gate + render contract + doc banners (v0.9 P00)

2026-08-05 16:26:26 +00:00

doc.go

feat(P08): CA, CSR, fingerprint, rotation, redact, TLS config + cert repo

2026-06-03 21:18:50 +00:00

fingerprint.go

feat(P08): CA, CSR, fingerprint, rotation, redact, TLS config + cert repo

2026-06-03 21:18:50 +00:00

flock_test.go

feat(P0c): Job/Service/DaemonSet schemas + emitter interface + systemd stub (REQ-074)

2026-08-05 17:17:02 +00:00

flock.go

fix(P24): known_hosts tightening + transport hardening (REQ-139, F15, F25)

2026-08-07 11:32:25 +00:00

integration_test.go

feat(P08): mTLS daemon + transport + cert CLI + doctor

2026-06-03 21:33:41 +00:00

redact.go

feat(P08): CA, CSR, fingerprint, rotation, redact, TLS config + cert repo

2026-06-03 21:18:50 +00:00

rotation.go

feat(P08): CA, CSR, fingerprint, rotation, redact, TLS config + cert repo

2026-06-03 21:18:50 +00:00

security_gosec_g101_test.go

docs(milestone): complete scheduling-streaming (v0.3)

2026-08-01 20:06:47 +00:00

security_scan_test.go

docs(milestone): complete scheduling-streaming (v0.3)

2026-08-01 20:06:47 +00:00

sshkey_test.go

feat(security): SSHFingerprintSHA256 helper (T02.1, REQ-058)

2026-08-04 11:35:59 +00:00

sshkey.go

refactor(security): export WriteAtomic (T02.2, REQ-059)

2026-08-04 11:36:42 +00:00

tls_config.go

feat(P08): CA, CSR, fingerprint, rotation, redact, TLS config + cert repo

2026-06-03 21:18:50 +00:00