Repository navigation
Fix: refresh docs, WebAuthn validation, data retention dry-run, cross-pod cache invalidation - #631
Merged
Abidoyesimze merged 4 commits intoOct 20, 2026
Conversation
Remove stale branch/status/line-count sections from March 2026 vault-events branch. Index now covers all documentation files in docs/ directory including October 2026 additions (LENDING, PROTECTION_FUND, RECURRING_WITHDRAWALS, MESSAGING_DELIVERY, WEBAUTHN, NOTIFICATION_PREFERENCES, QUEUE_HEALTH_METRICS, etc.). Closes Neurowealth#589
…ion policy - Add production/staging WebAuthn config validation at startup in src/index.ts - Fails fast with clear error message if WEBAUTHN_RP_ID or WEBAUTHN_ORIGIN is missing - Document attestation policy in WEBAUTHN.md: uses 'none' for consumer UX, no hardware vendor allowlist - Authenticator integrity enforced via challenge replay protection, origin/RP validation, counter regression detection Closes Neurowealth#608
- Add DATA_RETENTION_DRY_RUN environment variable for safe testing - Logs counts that would be deleted per table without performing deletions - Applies to all retention tables: auth_nonce, processed_event, dead_letter_event, agent_log, user_event - Update DATA_RETENTION_POLICY.md with dry-run documentation and use cases Closes Neurowealth#609
- Publish cache invalidation events on Redis channel for multi-pod deployments - Subscribe to invalidation events in each pod to invalidate local caches - Include correlationId and originPodId for filtering and observability - Document cross-pod consistency SLA and configuration in CACHE_INVALIDATION_POLICY.md - Graceful degradation to pod-local invalidation when Redis is unavailable Closes Neurowealth#611
|
@pope-h Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits. You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀 |
3 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
This PR implements four improvements across documentation, security, and operational tooling:
DOCUMENTATION_INDEX.md- removes outdated March 2026 vault-events branch references and indexes all October 2026 documentation additionsWEBAUTHN_RP_IDorWEBAUTHN_ORIGINis missing, documents attestation policy (nonefor consumer UX)DATA_RETENTION_DRY_RUNflag for safe testing with per-table deletion reportsTest plan
docs/Closes #589
Closes #608
Closes #609
Closes #611