Commit graph

8 commits

Author SHA1 Message Date
Ochenstarik
fb6ae61628 feat(infra): Task 03 upgrade to Next.js 16 and React 19 resolving high security advisories 2026-08-21 18:42:40 +07:00
Ochenstarik
6f3fd44333 feat(security): Task 02 client identity and user-scoped rate limiting 2026-08-21 18:34:13 +07:00
Ochenstarik
78151572bd fix(draw): Phase 2.4 enforce seed pre-commit at snapshot lock to prevent grinding 2026-08-20 17:24:07 +07:00
Ochenstarik
5d2554f33a feat(security): Phase 2.2.1 Critical AuthZ & Credential Security - centralized ownership guards, protected giveaway mutations, safe redirect validator, CSRF defenses, TokenVault production fail-fast, and comprehensive security tests 2026-08-18 03:08:02 +07:00
Ochenstarik
a27341a302 feat(core): Phase 1.5 Final Production Gate - Idempotency hardening with canonical request fingerprinting, secure client IP resolver with trusted proxy validation, proactive rate limit & idempotency bucket eviction, strict winner count contract (no silent under-delivery), DRAW_ALREADY_COMPLETED terminal error, 100-concurrency draw regression test, and PRODUCTION_GUARDS documentation 2026-08-18 02:22:54 +07:00
Ochenstarik
50973b4f85 feat(core): Phase 1.4 Production Hardening - double draw atomic protection, snapshot concurrency safety, Zod API validation, payload scalability & pagination, provider safety, normalized errors, idempotency, rate limiting, and 20 concurrent draw integration tests 2026-08-18 01:54:35 +07:00
Ochenstarik
0fb5fe3f8d feat(core): Phase 1.1 hardening - Prisma persistence, FSM, immutable snapshots, unbiased HMAC_SHA256_FY_V1 randomizer, and audit proof 2026-08-17 23:44:51 +07:00
Ochenstarik
02920a8743 feat: initial commit - VK Giveaway Randomizer Phase 1 2026-08-17 23:34:49 +07:00